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(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a radio communication apparatus which is 
capable of performing radio communication keeping the minimum security level by 
encryption predetermined by a communication group. 



SOLUTION: In a communication system, a 1st radio communication apparatus 
belonging to the communication group, receives a connection request frame including 
a notice security level from a 2nd radio communication apparatus outside of the 
communication group. The 1st radio communication apparatus stores a proprietary 
reference security level of the radio communication group which is selected from 
security levels specified depending on a encryption method including non-encryption 
and its strength. The 1 st radio communication apparatus generates a response frame 
which describes connection rejection to reject the connection to the 2nd radio 
communication apparatus or connection permission to permit the connection to the 
2nd radio communication apparatus, comparing the notice security level and the 
reference security level, and transmits to the 2nd radio communication apparatus. 
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CLAIMS 



[Claim(s)] 



[Claim 1] 

With the receive section which receives the 1st transmitting frame which has the 1st 
field where notice security level was described from the radio communication 
equipment besides a communication link group 

The memory section which memorizes the criteria security level which was selected 
from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and was assigned to said radio group, 
It reaches with the frame generating section which generates the 2nd transmitting 
frame which has the 2nd field where the connection refusal or connection 
authorization determined and determined is indicated [ authorization / a connection 
refusal with the radio communication equipment besides said radio group, or / 
connection ] in said notice security level as compared with said criteria security level. 
The transmitting section which turns this 2nd transmitting frame to the radio 
communication equipment besides said radio group, and transmits, 
The radio communication equipment belonging to said radio group characterized by 
providing. 
[Claim 2] 

Said criteria security level is a radio communication equipment of claim 1 with which it 
is selected from the 1st, 2nd, and 3rd security level, and said 1st security level is 
equivalent to un-enciphering, it is equivalent to the strength [ the 1 st ] of encryption 
with a radio communication equipment, and said 2nd security level is characterized by 
the thing [ in / in said 3rd security level / said 1 st encryption ] equivalent to the 
strength [ the 2nd ] of encryption in the 1 st encryption. 
[Claim 3] 

Said frame generating section is the radio communication equipment of claim 1 
characterized by determining a connection refusal if said notice security level is lower 
than said criteria security level, and determining connection authorization if said 
notice security level is not lower than said criteria security level. 
[Claim 4] 

The radio communication equipment of claim 1 characterized by said memory section 
holding the address and said notice security level of a radio communication equipment 
besides said radio group in said connection authorization. 
[Claim 5] 

Said 2nd communication link frame is the radio communication equipment of claim 1 
characterized by including the 3rd field where the address which specifies said radio 
group was described. 
[Claim 6] 

It sets to the radio communications system which consists of the 1st radio 
communication equipment belonging to a radio group, and the 2nd radio 
communication equipment besides this radio group, and is said 1st radio 



communication equipment, 

With the receive section which receives the 1st transmitting frame which has the 1st 
field where notice security level was described from said 2nd radio communication 
equipment 

The 1st memory section which memorizes the criteria security level which was 
selected from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and was assigned to said radio group, 
It reaches with the 1st frame generating section which generates the 2nd transmitting 
frame which has the 2nd field where the connection refusal or connection 
authorization determined and determined is indicated [ authorization / a connection 
refusal with said 2nd radio communication equipment, or / connection ] in said notice 
security level as compared with said criteria security level. 

The transmitting section which turns this 2nd transmitting frame to said 2nd radio 
communication equipment, and transmits, 

The radio communications system characterized by providing. 
[Claim 7] 

Said criteria security level is a radio communications system of claim 6 with which it is 
selected from the 1st, 2nd, and 3rd security level, and said 1st security level is 
equivalent to un-enciphering, it is equivalent to the strength [ the 1st ] of encryption 
with a radio communications system, and said 2nd security level is characterized by 
the thing [ in / in said 3rd security level / said 1st encryption ] equivalent to the 
strength [ the 2nd ] of encryption in the 1 st encryption. 
[Claim 8] 

Said 1st frame generating section is the radio communications system of claim 6 
characterized by determining a connection refusal if said notice security level is lower 
than said criteria security level, and determining connection authorization if said 
notice security level is not lower than said criteria security level. 
[Claim 9] 

The radio communications system of claim 6 characterized by said 1st memory 
section holding said the 2nd address and said notice security level of a radio 
communication equipment in said connection authorization. 
[Claim 10] 

Said 2nd communication link frame is the radio communications system of claim 6 
characterized by including the 3rd field where the address which specifies said radio 
group was described. 
[Claim 11] 

Said 2nd radio communication equipment is the radio communications system of claim 
6 characterized by providing the 2nd memory section holding the address of said 
criteria security level and said 1 st radio group. 
[Claim 1 2] 



It is the radio communications system of claim 6 characterized by said 2nd radio 
communication equipment transmitting the 3rd transmitting frame which has the 4th 
field where the 2nd notice security level was described to said 1st radio 
communication equipment when said 2nd radio communication equipment receives 
the 2nd transmitting frame which has the 2nd field where a connection refusal is 
described. 
[Claim 13] 

Said 1st memory is the radio communications system of claim 6 characterized by 
holding the encryption parameter relevant to the security level and encryption level 
which are supported with said 1st radio communication equipment, and selecting said 
criteria security level from this security level currently supported. 
[Claim 14] 

It is the radio communications system of claim 13 characterized by for said 2nd radio 
communication equipment transmitting the 4th transmitting frame which has the 5th 
field where encryption data are stored to said 1st radio communication equipment 
when said 2nd radio communication equipment receives the 2nd transmitting frame 
which has the 2nd field where connection authorization is described, and said 1st 
radio communication equipment compound-izing encryption data using said 
encryption parameter. 
[Claim 15] 

Said 1 st transmitting frame has the 1 st field where two or more notice security level 
currently supported with said 1st radio communication equipment was indicated. Said 
frame generating section compares each of said notice security level with said criteria 
security level. The radio communications system of claim 13 characterized by 
determining a connection refusal if said all notice security level is lower than said 
criteria security level, and determining connection authorization if one of said the 
notice security level is not lower than said criteria security level. 
[Claim 16] 

Said notice security level is the radio communications system of claim 6 
characterized by being equivalent to the greatest level in the notice security level 
which said 2nd radio communication equipment supports. 
[Claim 17] 

The radio communications system of claim 6 which is the 3rd radio communication 
equipment besides said radio group, and is characterized by providing further said 2nd 
radio communication equipment and the 3rd radio communication equipment which is 
communicating on said notice security level. 
[Claim 18] 

The radio communications system of claim 6 which is the 3rd radio communication 
equipment belonging to said radio group, and is characterized by providing further said 
2nd radio communication equipment and the 3rd radio communication equipment 



which is communicating on the security level which is not lower than said criteria 
security level. 
[Claim 19] 

One of said the 1st and 3rd radio communication equipments is the radio 
communications system of claim 6 characterized by being equivalent to an access 
point. 
[Claim 20] 

One of said the 1st and 3rd radio communication equipments is the radio 
communications system of claim 6 characterized by being equivalent to a wireless 
terminal. 
[Claim 21] 

One of said the 2nd and 3rd radio communication equipments is the radio 
communications system of claim 6 characterized by being equivalent to a wireless 
terminal. 
[Claim 22] 

The 3rd radio communication equipment which is the 3rd radio communication 
equipment besides said radio group, and is communicating with said 2nd radio 
communication equipment on said notice security level, 

The radio communications system of claim 6 which is the 4th radio communication 
equipment belonging to said radio group, and is characterized by providing further said 
2nd radio communication equipment and the 4th radio communication equipment 
which is communicating on the security level which is not lower than said criteria 
security level. 
[Claim 23] 

It is the radio communications system of claim 6 characterized by having the field 
where said 1st radio communication equipment notified the beacon frame to the 2nd 
radio communication equipment, transmission of said 1st transmitting frame was 
required, said beacon frame was supported with said 1st radio communication 
equipment, and the security frame which is not lower than said criteria security level 
was indicated. 
[Claim 24] 

Said 2nd radio communication equipment is the 2nd memory section which memorizes 
the 2nd security level containing said notice security level, 

It reaches with the 2nd frame generating section which determines one security level 
for said 2nd security level as said notice security level as compared with said criteria 
security level, and generates said 1st transmitting frame. 
It reaches. 

The transmitting section which turns this 1st transmitting frame to the 1st radio 
communication equipment, and transmits, 

Furthermore, the radio communications system of claim 6 characterized by providing. 



[Claim 25] 

The 1st transmitting frame which has the 1st field where notice security level was 
described is received from the outside of a communication link group, 
It is selected from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and the criteria security level 
assigned to said radio group is memorized, 

The 2nd transmitting frame which has the 2nd field where the connection refusal or 
connection authorization determined and determined is indicated [ authorization / a 
connection refusal with the radio communication equipment besides said radio group 
or / connection ] in said notice security level as compared with said criteria security 
level is generated, and it reaches. 

The radio approach characterized by turning this 2nd transmitting frame to the radio 
communication equipment besides said radio group, and transmitting. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] 

This invention relates to the radio approach at a radio communications system and a 
radio-communication-equipment list, and relates to the radio communications system 
which consists of two or more wireless terminal units and access points especially. 
[0002] 

[Description of the Prior Art] 

As wireless LAN, the wireless LAN system based on IEEE802.1 1 (an IEEE802.11 
system shall contain an IEEE802.11a system, an IEEE802.11b system, etc.) is known 
for nonpatent literature 1 . In this wireless LAN system, a method called WEP (Wired 
Equivalent Privacy) which can secure privacy like a cable as a cipher system is applied. 
Therefore, there is non-WEP mode in which the WEP mode in which WEP is applied, 
and WEP are not applied in the security level of the wireless LAN based on IEEE802.1 1. 
[0003] 

In the product of the wireless LAN according to actual IEEE802.1 1, the communication 
link by or [ any in the WEP mode in which a cipher system called WEP is applied, and 
the non-WEP mode which is not adapted ] is possible, and there is encryption mode 
which are 64 bits from which the level of encryption differs, and 128 bits in the WEP 
mode in_which WEP is applied, either is applied to each communication link or each 
connection link in wireless LAN, and a communication link is realized. Here; the more 
the level of encryption is high, security level is high and, the more it means being 



enciphered more strongly. 
[0004] 

There is a configuration unit of BSS (Basic Service Set) which consists of two or 
more wireless clients (it is also hereafter called a terminal.) connected to one set (it is 
also hereafter called a base station.) of an access point and this access point as one 
gestalt of the wireless LAN according to IEEE802.1 1, and there is a system by which 
two or more BSS is prepared and a network is built. 
[0005] 

The structural element which connects between this BSS is called DS (Distribution 
System). A base station, i.e., an access point, has a function linked to this DS, and 
between BSS and DSs is transmitted to information through an access point. 
Therefore, a terminal can communicate also with the terminal which belongs to other 
BSS through an access point. 
[0006] 

In order to communicate with the terminal which a terminal belongs to BSS and 
belongs to other BSS through a base station, authentication (authentication) and 
association (association) procedure are carried out between base stations. Moreover, 
when a terminal remakes wireless connection in other access points, rear sociation 
(reassociation) procedure is performed. 
[0007] 

In the wireless LAN which becomes settled in IEEE802.11, there are a frame for 
control for an access control (control frame), administrative frames (management 
frame) including a beacon, and a data frame for data communication (data frame) as a 
class of frame to exchange. Here, an administrative frame is used for processing of 
authentication, an association, and rear sociation. 
[0008] 

When a terminal sends and receives a data frame between access points, 
authentication and association processing are surely performed before that. 
[0009] 

In the wireless LAN which becomes settled in IEEE802.11, it asks a base station 
whether use WEP whose terminal is a cipher system. That is, when WEP can be used, 
the authentication frame is sent [ the base station which required that a terminal 
should use WEP for a base station, and received this demand ] in an authentication 
demand (authentication request) and received between a base station and a terminal. 
WEP can be used now based on transmission and reception of such an authentication 
frame. 
[0010] 

There is BSS which exists independently of the existing infrastructure as other 
gestalten of the wireless LAN which becomes settled in IEEE802.1 1, and this is called 
IBSS (Independent Basic Service Set). In IBSS, an access point is not prepared but 



IBSS is equivalent to the communication configuration with which a terminal 
communicates each other directly. Moreover, in IBSS, association processing is not 
performed and, similarly rear sociation processing is not performed. Even if it has not 
passed through authentication processing between terminals, a data frame can be 
sent and received in this IBSS. 
[0011] 

[Nonpatent literature 1] ISO/IEC 8802-11:1999 (E) ANSI/IEEE Std 802.11, 1999 

edition 

[0012] 

[Problem(s) to be Solved by the Invention] 

Thus, in the conventional wireless LAN, commo data is enciphered as one of the 
security countermeasures. The side which received the connection request from the 
side which emitted the connection request, for example, a terminal, for example, an 
access point, is required whether to use an encryption function (WEP function) on the 
occasion of a communication link. In the base station side which received this demand, 
if use of the WEP function suitable for the demand concerned is possible, the demand 
concerned would be accepted and the data communication between the terminals 
concerned will be enciphered. Moreover, it is set leading by the side to which whether 
it communicates on which security level emitted the connection request 
[0013] 

From now on, it will be surmised by wireless LAN that cipher systems which are two or 
more kinds from which the level of encryption differs, such as a cipher system with 
security level higher than WEP, are adopted as wireless LAN besides WEP. Therefore, 
it is required that a setup of fine security level should be attained according to the 
class ef cipher system, encryption level, etc. 
[0014] 

however, the texture according to the class of cipher system, encryption 
reinforcement, etc. in the case of about [ that it cannot be said that the system which 
permits only the communication link by the encryption which the minimum encryption 
level sets beforehand for security reservation, and has the level beyond it for every 
BSS is made from the conventional wireless LAN ], and a communication link — there 
is a trouble that warm security level cannot be set up. 
[0015] 

furthermore, in IBSS, since it is not necessary to carry out authentication in case a 
data frame is transmitted, there is a trouble that the data frame which is not 
enciphered cannot be transmitted and security in a system cannot be secured. 
[0016] 

Moreover, if the security level beforehand set to the BSS is not securable for every 
BSS, also in DS communication link which communicates among two or more BSS 
similarly, there is a trouble that the security level set to each BSS is not securable. 



[0017] 

This invention is made in view of the situation mentioned above, and that purpose is in 
providing with the radio approach the radio communications system and 
radio-communication-equipment list whose radio secure the minimum security level 
by the encryption beforehand defined into the communication link group, and is 
possible. 
[0018] 

[Means for Solving the Problem] 
According to this invention 

With the receive section which receives the 1st transmitting frame which has the 1st 
field where notice security level was described from the radio communication 
equipment besides a communication link group 

The memory section which memorizes the criteria security level which was selected 
from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and was assigned to said radio group, 
It reaches with the frame generating section which generates the 2nd transmitting 
frame which has the 2nd field where the connection refusal or connection 
authorization determined and determined is indicated [ authorization / a connection 
refusal with the radio communication equipment besides said radio group, or / 
connection ] in said notice security level as compared with said criteria security level. 
The transmitting section which turns this 2nd transmitting frame to the radio 
communication equipment besides said radio group, and transmits, 
The radio communication equipment belonging to said radio group characterized by 
providing is offered. 
[0019]. 

Moreover, according to this invention, it is, 

It sets to the radio communications system which consists of the 1st radio 
communication equipment belonging to a radio group, and the 2nd radio 
communication equipment besides this radio group, and is said 1st radio 
communication equipment, 

With the receive section which receives the 1st transmitting frame. which has the 1st 
field where notice security level was described from said 2nd radio communication 
equipment 

The 1st memory section which memorizes the criteria security level which was 
selected from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and was assigned to said radio group, 
It reaches with the 1st frame generating section which generates the 2nd transmitting 
frame which has the 2nd field where the connection refusal or connection 
authorization determined and determined is indicated [ authorization / a connection 
refusal with said 2nd radio communication equipment, or / connection ] in said notice 



security level as compared with said criteria security level. 

The transmitting section which turns this 2nd transmitting frame to said 2nd radio 
communication equipment, and transmits, 

The radio communications system characterized by providing is offered. 
[0020] 

Furthermore, according to this invention, it is. 

The 1st transmitting frame which has the 1st field where notice security level was 
described is received from the outside of a communication link group, 
It is selected from the security level depending on the encryption approach including 
un-enciphering, and the strength of encryption, and the criteria security level 
assigned to said radio group is memorized, 

The 2nd transmitting frame which has the 2nd field where the connection refusal or 
connection authorization determined and determined is indicated [ authorization / a 
connection refusal with the radio communication equipment besides said radio group 
or / connection ] in said notice security level as compared with said criteria security 
level is generated, and it reaches. 

The radio approach characterized by turning this 2nd transmitting frame to the radio 
communication equipment besides said radio group, and transmitting is offered. 
[0021] 

[Embodiment of the Invention] 

Hereafter, with reference to a drawing, the operation gestalt concerning the radio 

communications system of this invention is explained. 

[0022] 

First, in the wireless LAN system in the following operation gestalten, two or more 
kinds of cipher systems can be applied, the class of the cipher system is distinguished, 
and, moreover, the security level which ranked and carried out encryption level is 
defined beforehand. Supposing there is level which is different in each of two or more 
kinds of cipher systems, for every encryption level in the kind of a certain kind of 
cipher system, a rank will be attached according to extent of encryption 
reinforcement, and one security level will be set up to each. Therefore, if the classes 
of cipher system differ even if it has the same encryption reinforcement, different 
level as the security level will be given. For example, it considers as enc.0, end, enc.2, 
— , the thing that has n pieces like enc. (n~1) as security level at order from what has 
the low reinforcement of encryption. Even if there are two or more kinds of cipher 
systems of the same reinforcement, the security level from which a rank differs for 
every class of the shall be set up. Thus, the cipher system of one class corresponds, 
and even if it is in the cipher system of the same class, when there is moreover two or 
more level by difference of encryption reinforcement, the security level corresponding 
to each of the level is set to one security level. 
[0023] 



Now, in the wireless LAN system specified to present IEEE802.1 1, as for the minimum 
level of security level, encryption nothing, i.e., the level for which WEP (Wired 
Equivalent Privacy) is not adapted, corresponds. 
[0024] 

There is two level as WEP is further constituted from 64 bits or 128 bits, even if it is, 
when WEP is applied to present IEEE802.11 with the wireless LAN product according 
to a convention, then — the following — operation — a gestalt — an example — **** 

— plurality — security — level — ****** — present — IEE — 802.11 — a 
convention — following — wireless LAN — the same — ( — one — ) — " — WEP — 
nothing — " — (— two — ) — " — WEP — **** — 64 — a bit — WEP — use — " 

— (— three — ) — " — WEP — **** — 1 28 — a bit — WEP — use — " — three — 
a ** — level — it is — a case — as an example — explaining . in this case, the thing 
with the highest security — (3)" — those with WEP — 128-bit WEP — use" — it is 

— this — subsequently — (4)" — the security of use" is high about 64-bit WEP with 
WEP. that is, "" "having no enc.OO) WEP" — corresponding — " — those with 
end "(2)" WEP — 64-bit WEP — use" — corresponding — " — " "shall correspond 
128-bit WEP to use" with enc.2(3) WEP 

[0025] 

In the following explanation, the case of only the cipher system of one class of WEP is 
explained. However, if two or more level can be set up according to a difference of the 
class of cipher system, and the strength of security even if it is cipher systems other 
than WEP, this invention is applicable even if it is in which cipher system like 
explanation of the following operation gestalten. 
[0026] 

The operation gestalt of this following invention explains the case where this invention 
is applied to the wireless LAN system to which it was specified at IEE802.11. 
Especially the case where it applies to the base station or terminal which constitutes 
the wireless LAN system to which the radio communication equipment of this 
invention was specified at IEE802.11 is explained. 
[0027] 

(1st operation gestalt) 

First, the communication system with which the base station AP 1 where wireless 
connection of two or more terminals (WL11-WL12), for example, two terminals, and 
this terminal (WL11-WL12) is made as a radio communications system constitutes 
one BSS (BASIC service set) in the 1st operation gestalt of this invention is explained. 
[0028] 

Drawing 1 shows typically the 1st BSS (hereafter referred to as BSS1 simply). BSS1 
consists of two wireless terminals (it is hereafter called a terminal) WL1 1 and WL12 at 
two or more terminals connected to the base station AP 1 and base station AP 1 as 
an access point, for example, here. 



[0029] 

In addition, the base station AP 2 belonging to the 2nd BSS (hereafter referred to as 
BSS2 simply) which is different in 1st BSS1, and the terminal WL1 3 which has not 
joined BSS1 and BSS2 are also shown in drawing 1 . 
[0030] 

The minimum security level (encjow) permitted there is set to BSS1. In the radio 
communications system concerning this operation gestalt, the minimum security level 
(encjow) permitted by BSS1 supposes that it is security level "end." The purport 
whose minimum security level (encjow) to permit is security level "enc.1" is 
expressed as encJow=end to drawing 1 . In the base station AP 1, security 
levefenc.1 level [ security ] enc.2" with high level shall also be supported rather 
than" "besides the security level "enc.1." Therefore, the highest usable security level 
(enc.high) is set to "enc.2" by BSS1. The purport whose highest security level 
(encjiigh) is "enc.2" is expressed in drawing 1 as enc_high=enc.2. As for the terminal 
or base station connected to a base station AP 1 and this base station AP 1 , it is 
beforehand set as the base station AP 1 that a communication link is carried out on 
the security level more than "enc.1." It is beforehand set as the base station AP 1 
between the terminal for similarly, relaying this base station AP 1 and communicating 
to other equipments, or the base station that a communication link is carried out on 
the security level more than "enc.1." 
[0031] 

On the other hand, the security level which a terminal WL1 1 has presupposes that 
"enc.0", "end", and the security level that a terminal WL12has are "enc.0", "end", 
and "enc.2." 
[0032] ~ 

Drawing 2 shows the block of the circuitry of the base station AP 1 shown in drawing 
1 . In addition, in the following explanation, when there is no need of distinguishing a 
base station AP 1 and a base station AP 2, in the explanation common to both, a base 
station AP is only called. 
[0033] 

In drawing 2 , the sending signal from a terminal is received by the antenna 20, and an 
input signal is generated by processing including a recovery and decode in a receive 
section 1 1. In the transmitting section 12, the sending signal which should transmit to 
a terminal through an antenna 20 is generated, and these sending signals are supplied 
to an antenna 20. 
[0034] 

Predetermined reception which the input signal from a receive section 11 was 
inputted into the reception-control section 13, for example, was based on the 
IEEE802.11 system (an IEEE802.1 1 system shall also contain the IEEE802.11 system 
upon which it will be decided an IEEE802.11a system, an IEEE802.11b system, and 



from now on in the following explanation) is carried out. In this reception-control 
section 13, decryption processing corresponding to each of two or more security level 
which a base station supports is performed, and an input signal is compound-ized 
(decrypt) and is changed into compound-ized data. This compound-ized data is 
supplied to the information processing section 1 5, and is divided into video, an audio, a 
text, and the data of other types, and required processing is performed. 
[0035] 

The transmission-control section 14 carries out predetermined transmitting 
processing based on IEEE802.1 1 of generating the data for transmitting to a terminal 
by broadcasting or the unicast based on the data supplied from the information 
processing section 15 etc. It has given the data which should transmit the encryption 
processing corresponding to each of two or more security level which a base station 
supports in this transmission-control section 14, The data generated in the 
transmission-control section 14 are transmitted to a terminal as a sending signal 
through the transmitting section 12. In addition, the security table 21 shown in drawing 
2 is explained later. 
[0036] 

Drawing 3 shows roughly an example of the circuitry of the terminals WL1 1, WL12, and 
WL13 shown in drawing 1 with a block. In addition, in the following explanation, when 
there is no need of distinguishing terminals WL11, WL12, and WL13 etc., in the 
explanation common to all terminals, it is only called Terminal WL. 
[0037] 

A terminal WL consists of the information-processing sections 108 and the security 
tables 1 10 which display on the display which generated the reception-control section 
105 which controls the receive section 101 which receives an input signal through an 
antenna 100 and an antenna 100, and a receive section 101, the transmitting section 
107 which transmits a sending signal through an antenna 100, the 
transmission-control section 106 which controls this transmitting section 107, and 
the data transmitted, or received, which carries out data processing for example, 
which is not illustrated. 
[0038] 

The information processing section 108 creates transmit data based on the data 
which received data from the cable network 109 connected to this information 
processing section 108, or were generated by actuation of a user. This transmit data 
will pass transmit data to the transmitting section 107 in response to this Request to 
Send, if transmission of that transmit data is directed by the user and a Request to 
Send arises. In the transmitting section 107, it is changed into the MAC frame 
(medium access control frame) which this transmit data is changed into the digital 
data defined by specification, for example, specifies an IP packet by IEEE802.11, the 
MAC frame as digital data is changed into predetermined frequency, for example, the 



radio signal it is [ radio signal ] 2.4GHz, and it is sent as an electric wave from an 

antenna 100. 

[0039] 

On the other hand, it is changed into the MAC frame as digital data in a receive 
section 101, received data are extracted from the information field in this MAC frame, 
and the input signal received with the antenna 100 is sent to the information 
processing section 108. This information processing section 108 processes displaying 
received data on a display etc. In addition, the information processing section 108 
performs various information processing besides the above. Moreover, the security 
table 110 is explained later. 
[0040] 

The MAC frame specified by IEEE802.11 consists of the frame-check-sequence 
(FCS) fields for investigating whether the MAC header which is a maximum of 30 
bytes to which various control information was dedicated, the data field (frame body) 
in which the data which are a maximum of 2312 bytes are settled, and data were sent 
correctly, as shown in drawing 4 . The frame control field where the information which 
controls the MAC frame is stored, and Duration/IDfield ID of the terminal with which a 
terminal can send data, and which is called Association ID in a standby time (duration) 
or IEEE802.11 until it becomes like like is described to be are contained in the MAC 
header. If BSS is equipped with the base station AP, the MAC Address of a base 
station AP will be described as ID of this BSS. Moreover, the field and the sequential 
control field of the address 4 are prepared for the MAC header from the field of the 
address 1. When transmitted to other access points from an access point with a data 
frame, the addresses 1-4 are assigned as follows. That is, the MAC Address of the 
final destination in communication system (Destination Address) is described, the 
MAC Address of the transmitting origin in communication system (Source Address) is 
described by the field of the address 1, the MAC Address of the transmission place 
which sends the MAC frame concerned to the field of the address 3 directly is 
described, and the MAC Address of the transmitting origin which sends the MAC 
frame concerned to the field of the address 4 directly is described by the field of the 
address 2 in it. 
[0041] 

The protocol version field where the version of a protocol is described is established 
in frame control of the MAC frame, and the type field and the subtype field are 
established in it following this. There are the following three types of the MAC frames, 
and this type is described by the type field (2 bits) in frame control. Moreover, the 
type of subtype is further shown in a detail in the subtype field (4 bits). That is, it is (1) 
as a type. There are a frame for control for an administrative frame and (2) access 
controls and a data frame for (3) data communication. (1) There are a beacon 
(Beacon), a frame of authentication (Authentication), a frame of an association 



(Association), an association request frame, an association response frame, etc. in an 
administrative frame as a subtype. Moreover, (2) There are frames for control, such as 
ACK (Acknowledgment), RTS (Return To Send), and CTS (Clear To Send), among the 
frames for control as a subtype. The subtype in the MAC frame of the above specific 
classes is further shown in the detail in the subtype field (4 bits). 
[0042] 

In addition, the To DS field (1 bit) and the From DS field (1 bit) are included in frame 
control. These are used when the MAC frame is a data frame, and with the frame of 
the frame of the other class, for example, authentication, and an association, "0" is 
always written in and they are not used. If the destination of data is Cable LAN, an 
access point, or DS when the MAC frame is a data frame, the bit of 1 will be described 
by this To DS field, and the bit of 1 will be described by this From DS field if the 
transmitting origin of data is Cable LAN, an access point, or DS. And also [ like the 
reserve field (reserved field), the WEP field, and the order field (order field) ], the field 
is further prepared for frame control. Information can be written in the reserve field 
which does not especially still have a law by the user. As shown in drawing 4 , 
according to either the type of a frame and the subtype or the type of a frame and the 
subtype, some fields are considered as reserve. With the operation gestalt of this 
invention, encryption level may be described by this reserve field so that it may 
explain later. This encryption level is defined according to the attribute of transmit 
data. If it is contents data with which confidentiality is demanded, high encryption level 
will be defined and that encryption level will be described by this reserve field. The 
encryption level of this reserve field may be used in case [ of / between an access 
point and a terminal ] a handshake is carried out. The bit of 1 is set to the WEP field 
when WEP is used. 
[0043] 

With reference to drawing 1 , BSS1 is explained again. 
[0044] 

In BSS1 shown in drawing 1 , it is defined beforehand that a communication link is 
performed on the minimum security level (here "end") beforehand set to this BSS1. 
That is, a communication link on the security level more than "end" is performed 
within the limits of the security level on which security level "end" or a base station 
AP 1 is supporting the base station AP 1 which constitutes BSS1, and each of 
terminals WL11-WL12. 
[0045] 

Each of a base station AP 1 and terminals WL1 1-WL12 is equipped with the storage 
section, and the security table is prepared in this storage section. As for the security 
level which each of any the security level which base station AP1 self supports, and 
the security level of the minimum level [ in / in the inside of this security level / 
BSS1 ] are, and terminals WL11-WL12 is supporting, it is memorized by the security 



table of a base station AP 1 what kind of thing it is. Moreover, it is desirable 
information required for encryption and a decryption of each security level, and it is 
desirable that the seed information for generating a cryptographic key or a 
cryptographic key etc. is memorized by this security table (information required for 
such encryption and a decryption is only called a code parameter here.). Moreover, 
each of terminals WL11-WL12 is also equipped with the storage section the security 
table is remembered to be, and the security level of the minimum level in the security 
level which BSS1' supports, the security level which is supporting other terminals, the 
code parameter further corresponding to each security level, etc. are memorized by 
the security table. 
[0046] 

As shown in drawing 5 , it registers with the security table 21 of a base station AP 1 
beforehand with the code parameter which is data which need for the code and 
compound of each security level the security level supported in BSS1 to which the 
base station AP 1 concerned belongs and the security level which all the terminals 
WL1 1-WL12 belonging to BSS1 have. Moreover, the security level set up as security 
level of the minimum level in BSS1 to which a base station AP 1 belongs is registered 
into this security table 21 so that it may be identifiable. In drawing 5 , the security 
level "O" mark which means the minimum level to "end" is recorded. 
[0047] 

The private key (keyl, key2) with which the encryption parameter is specified by 
IEEE802.11 as an example in WEP, IV (Initialization Vector), etc. are assumed. In 
addition, in the following explanation, security level and the code parameter 
corresponding to this security level may be called security information. 
[0048]- 

Drawing 6 shows the contents of registration of the security table 110 of the 
terminals WL1 1-WL12 in BSS1. As shown in drawing 6 , the security information which 
each terminal in BSS1 and a base station AP 1 have is beforehand registered into the 
security table by the side of a terminal. As security information corresponding to a 
base station AP 1, as shown in drawing 6 , only the security information of the 
minimum level beforehand set as BSS1 to which this base station AP 1 belongs may 
be registered. Moreover, the security table 110 by the side of a terminal may 
completely be the same as the security table 21 by the side of the base station shown 
in drawing 5 . 
[0049] 

Moreover, the base station AP 1 registered into the security table shown in drawing 5 
and drawing 6 and the security level of each terminal should just be the things more 
than the minimum level beforehand defined by BSS1. Furthermore, about the security 
information corresponding to each terminal, only the security level used in BSS1 in 
the case of an actual communication link may be registered. That is, when each 



terminal is directly linked to an access point and it is directly linked to the security 
information about an access point, or a terminal, it is the security information about a 
terminal and each terminal can be held on the security table about the security 
information currently supported with the terminal in BSS. 
[0050] 

Moreover, the security table shown in drawing 5 and drawing 6 is set up at the time of 
initialization of BSS1. The table of the format shown in drawing 5 and drawing 6 is 
displayed as a setting screen, and you may make it input a setting matter on this 
screen at the time of initialization. In the table shown in drawing 5 and drawing 6 , AP1 , 
WL1, and WL2 are specified by the MAC Address of a base station AP 1 and terminals 
WL1 and WL2, respectively. 
[0051] 

In addition, any [ the security table shown in drawing 5 and drawing 6 ] information in 
the case of initialization does not need to be written in, either. However, security 
information can be written in, if it is linked in the mode in which it does not encipher so 
that an access point AP 1 and terminals WL1 and WL2 may explain later with 
reference to drawing 7 . Namely, an access point AP 1 and terminals WL1 and WL2 
acquire the security information about an access point AP 1 and terminals WL1 and 
WL2, and write in each security table, BSS1 is established after that with an access 
point AP 1 and terminals WL1 and WL2, and the minimum security level within BSS1 
should just be set up. 
[0052] 

By BSS1 shown in drawing 1 , a communication link is performed between a base 
station AP 1 and terminals WL [ WL1 1-] 12 on the security level more than minimum 
security level "end" beforehand set up to this BSS1. 
[0053] 

Next, the case where the terminal WL13 which has not joined the base station AP 1 of 
BSS1 shown in drawing 1 at this BSS1 is connected is explained with reference to the 
flow chart shown in drawing 7 . 
[0054] 

A terminal WL13 receives the beacon (Beacon) frame specified to IEEE802.1 1 
transmitted from a base station AP 1. according to a convention of IEEE802.1 1 — 
reception of a beacon frame — then — next, although authentication (authentication) 
and an association (association) protocol continue, the security level of a terminal 
WL13 is written in into the frame for this authentication or an association as 
information notified to a base station AP 1 . 
[0055] 

The procedure in the case of notifying the security level of a terminal WL13 to a base 
station AP 1 with the frame of authentication as an example is shown in drawing 7 . In 
this procedure, it is assumed that the security level which a terminal WL13 has is 



enc.O and end. 
[0056] 

Drawing 8 (a) shows the format of the frame body in the frame of the authentication 
as a MAC frame shown in drawing 4 specified to IEEE802.11. The authentication 
algorithm which distinguishes the common encryption keying system which uses for 
an authentication frame the open system which does not use a common cryptographic 
key, and a common cryptographic key is described. "0" is described with an open 
system by the authentication algorithm number, and "1" is described with a common 
encryption keying system. In the open system specified by the authentication 
algorithm number 0, as shown in drawing 8 (b), the frame of ATSN(Authentication 
Transaction Sequence Number) =1 and =2 is prepared as a demand frame of 
authentication. The frame of the authentication of ATSN=1 is sent to a base station 
AP 1 from Terminal WL, and the status code field (Status Code field) is considered as 
reserve. The frame of the authentication of ATSN=2 is sent to Terminal WL from a 
base station AP 1 , and the code of a connection refusal or connection authorization is 
indicated by the status code (Status Code) as the status. In the open system 
specified by the authentication algorithm number 0, the challenge text in which the 
frame of authentication is enciphered is not prepared. In the common encryption 
keying system, the frame of ATSN(Authentication Transaction Sequence Number) 
=1-4 is prepared as a demand frame (authentication request) of authentication. The 
frame of the authentication of ATSN=1 and ATSN=3 is sent to a base station AP 1 
from Terminal WL, and the status code is considered as reserve. The frame of the 
authentication of ATSN=2 and ATSN=4 is sent to Terminal WL from a base station AP 
1, and the code of a connection refusal or connection authorization is indicated by the 
status- code as the status, a common encryption system — ATSN= — the challenge 
text for encryption is prepared for the frame of the authentication of 2 and 3, and the 
frame of the authentication of ATSN=3 is enciphered, on the other hand, ATSN= — 
the challenge text for encryption is not prepared for the frame of the authentication of 
1 and 4. 
[0057] 

The frame of the authentication specified by ATSN=1 is transmitted from the side 
which emits a connection request. With this demand frame, that status code field is 
considered as reserve, and is intact now. Therefore, security level "end" of the side 
which emits a connection request, or "enc.2" can be written in this status code field. 
In explanation of the following operation gestalten, security level "enc.1" of the side 
which emits a connection request, or "enc.2" shall be written in Statuscode field. The 
data in which security level (for example, "end") to use for the frame of this 
authentication of ATSN=1 by the communication link with a base station AP 1 in the 
transmitting section 107 of a terminal WL13 is shown are written in the term of that 
status code, and as the frame of this authentication of ATSN=1 shows step S2 of 



drawing 7 , it is transmitted to a base station AP 1 . In addition, this security level may 
be written in the reserve field of either of the MAC frames shown in drawing 4 . 
[0058] 

Processing actuation of the base station AP 1 which received the frame of the 
authentication of ATSN=1 is explained. It is detected by the terminal WL13 as are 
already indicated, and the beacon frame always emitted from the base station AP 1 
shows step S1. After this detection, the transmission-control section 106 of a 
terminal WL13 prepares the authentication frame of ATSN=1, and writes security level 
"end" or "enc.2" in the predetermined part of that frame, for example, the status 
code in the frame body, with reference to the security table 110. The authentication 
frame in which security level was written is specified as the address 2 by making into 
the destination the base station AP 1 corresponding to the beacon frame detected by 
the transmission-control section 106 of a terminal WL13, and as shown in step S2, it 
is transmitted to a base station AP 1. a base station — AP — one — authentication 

— a frame — receiving — a base station — AP — one — a reception control — the 
section — 13 — having received — ATSN — = — one — authentication — a frame 

predetermined — a part — for example, — a frame — the body — inside — a 
status code — writing in — having — **** — a terminal — WL — 13 — security — 
level — " — enc . — one — " — or — " — enc . — two — " — taking out — a base 
station — AP — one — security — a table — 21 — registering — having — **** — 
BSS — one — the minimum — level — security — level — "encjow" — comparing . 
a step — S — three — being shown — as — a terminal — WL — 13 — from — 
notifying — having had — this — a terminal — WL — 13 — security — level — " — 
enc . — one — " — or — " — enc . — two — " — a base station — AP — one — 
supporting — **** — security — level — " — - enc . — one — " — or — " — enc . 

— two — " — it is — moreover — BSS — one — inside — it can set — the 
minimum — level — security — level — "encjow" — more than — the time — **** 

— a terminal — WL — 13 — connection — granting a permission — ** — judging . 
Although it is the security level which the base station AP 1 is supporting when the 
security level of a terminal WL1 3 is not the security level which the base station AP 1 
is supporting or, it is judged that connection of a terminal WL13 is refused at the time 
under of the security level of minimum level "encjow" in BSS1. 

[0059] 

In step S3, when a base station AP 1 refuses connection of a terminal WL13, the 
authentication frame of ATSN=2 is prepared for IEEE802.11 by the 
transmission-control section 12 according to a convention, the code of the purport 
whose connection is failure is written in the status code, and as shown in step S4, the 
authentication frame of ATSN=2 is answered by the terminal WL13. Reception of the 
authentication frame of ATSN=2 to which description which refuses connection as a 
terminal WL13 is shown in step S5 was carried out judges whether it is eye N time. 



This N time is equivalent to the number of the security level currently written in the 
security table 110 by the side of a terminal (=N individual). At the beginning, as level 
with the low security level which the base station AP 1 is supporting, a terminal WL13 
notifies the security level of this low level to a base station, and if refused, that 
security level will be raised, and the security level raised as shown in step S2 is 
notified. The security level of N individual which the security table 1 10 by the side of a 
terminal is supporting is notified, and as shown in step S5, when N time is covered and 
a terminal WL13 receives the authentication frame of ATSN=2, it judges that it was 
refused by connection from a base station AP 1, and connection procedure is 
interrupted as shown in step S15 in this phase. 
[0060] 

On the other hand, when permitting connection of a terminal WL13 A base station AP 
1 that the code parameter corresponding to the security level notified from the 
terminal WL13 should be shared with a terminal WL13 The authentication frame of 
ATSN=2 which transmit the Chilian range text to IEEE802.1 1 according to a 
convention as shown in step S6 is prepared. The code of the purport whose reception 
of the authentication frame of ATSN=1 is a success is written in the status code of 
this authentication frame, and as shown in step S6, a terminal WL13 is answered. 
[0061] 

At a terminal WL13, reception of the authentication frame of ATSN=2 decides the 
security level between a base station AP 1 and a terminal WL13, for example, security 
level"enc.1." Moreover, a terminal WL13 is enciphered using the WEP function in 
which a terminal WL13 has the frame body which contains a challenge text etc. as a 
code parameter corresponding to security level according to a convention of 
IEEE802.1 1 using IV and the private key which were acquired beforehand by the user 
as shown in step S7. Furthermore, a terminal WL13 prepares the authentication frame 
of ATSN=3, and copies a challenge text to the frame body from the authentication 
frame of ATSN=2. This terminal WL13 is transmitted to a base station AP 1, as a 
frame is enciphered and it is shown in step S8. 
[0062] 

In the base station AP 1 which received the authentication frame of ATSN=3, the 
encryption challenge text stored by decoding the authentication frame of ATSN=3 
received as shown in step S9 with the private key which the base station AP 1 
currently similarly shared between the terminal WL13 by IEEE802.1 1 according to the 
convention has will be taken out. This compound-ized challenge text is compared with 
the transmitted challenge text, and as shown in step S10, encryption / 
compound-ization is verified based on that comparison result. 
[0063] 

If a verification result is "failure", the authentication frame of ATSN=4 which similarly 
notify that to IEEE802.1 1 according to a convention will be prepared, the code of the 



purport whose verification result is "failure" will be written in the status code, and as 
shown in step S11, the authentication frame of ATSN=4 will be answered by the 
terminal WL13. "Failure" of a verification result means that the cipher system is 
different with the base station AP 1 and the terminal WL13. Therefore, as shown in 
step S14, it is checked that the authentication frame of ATSN=4 is less than M times, 
the cipher system in a terminal WL13 is changed, and it is returned to step S2, and 
step S10 is repeated from step S2. Here, it can respond to the number of the cipher 
system which the terminal WL13 is preparing M times, and, as for a terminal WL13, the 
authentication frame of M time ATSN=4 can be received, thus, even if the terminal 
WL1 3 received the authentication frame of M time ATSN=4, when a cipher system 
was not in agreement, as for the terminal WL13, connection with a base station AP 1 
was refused — it is judged. Therefore, in a terminal side, as shown in step S15, 
connection procedure is ended, noting that the cipher system which a base station AP 
1 offers is not prepared. 
[0064] 

On the other hand, if the verification result in step S10 is "a success", a base station 
AP 1 will transmit the authentication frame of ATSN=4 which similarly notify that to 
IEEE802.1 1 according to a convention as shown in step S12 to a terminal WL13. At a 
terminal WL13, reception of this frame starts the association specified to IEEE802.1 1 
which is the following procedure as shown in step S12. That is, a terminal WL13 
answers delivery and this request in an association request frame as shown in step 
S13 in a base station AP 1, and processing actuation which followed the convention at 
IEEE802.11 which returns a base station AP 1 to the association response terminal 
WL13 is performed. After an association is completed normally, a data frame is 
transmitted and received between a terminal WL13 and a base station AP 1. The data 
frame transmitted and received is enciphered by the 64-bit WEP function equivalent 
to the encryption beforehand defined by the above-mentioned procedure, for example, 
the security level of "enc.1=enc.low." 
[0065] 

In addition, in a terminal WL13 and a base station AP 1, when the security level and 
the code parameter of the communication link between the terminal WL13 and a base 
station AP 1 are decided, mutual security information is registered into the security 
table 21,1 10. That is, at a terminal WL13, after acquiring a code parameter at step S7 
shown in drawing 7 , the security information of a base station AP 1 is registered into 
the security table 110. Moreover, in a base station AP 1, after verification is 
successful at step S10 of drawing 7 , the security information of a terminal WL13 is 
registered into the security table 21. That is, security information is registered into 
the security table 21 of an access point AP 1 by relation with this address by choosing 
the suitable address field which shows the address of the terminal WL13 in the MAC 
frame shown in drawing 4 . As shown in drawing 10 , the security information whose 



"connection place" is a terminal WL13 is newly registered into the security table of a 
base station AP 1. The security information whose "connection place" is a base 
station AP 1 similarly is newly registered also into the security table of a terminal 
WL13. That is, security information is registered into the security table 110 of a 
terminal WL13 by relation with this address by choosing the suitable address field 
which shows the address 1 of the base station AP 1 in the MAC frame shown in 
drawing 4 . The security level of the security information in this newly added terminal 
WL13 is equivalent to the security level which the terminal WL13 has required at step 
S2 of drawing 7 . 
[0066] 

Moreover, if the security information of a base station is registered into the security 
table by the side of a terminal, a terminal can choose beforehand the security level 
more than the minimum level of the base station, consequently will be step S3, and will 
not have connection refused from the base station concerned. Here, the security 
information of a base station has the security level more than the minimum level 
beforehand set to BSS to which the base station concerned belongs at least. What is 
necessary is just to notify this security level to a base station, as the security level 
more than the minimum level set to the base station in the base station out of the 
security level which the terminal itself is supporting is chosen and it is shown in step 
S2 in drawing 7 in case a terminal will re-connect with a base station, if it puts in 
another way. 
[0067] 

Moreover, it is desirable that the security information of the security level more than 
minimum level encjow beforehand set to BSS to which the base station concerned 
belongs to the security table of a base station AP at least as security information 
about Terminal WL is registered. In this registration, about BSS to which a base 
station belongs, BSS is specified in the address indicated by the suitable address field 
in the MAC frame shown in drawing 4 , and this address and security level are 
described by the security table. If there is registration about such BSS, the security 
level on which it is more than the minimum level concerned, and the terminal 
concerned can moreover support the security level used for the unicast 
communication link to the terminal concerned from a base station will be chosen 
beforehand, and the thing of it can be carried out. Moreover, the security level in the 
multicast communication link to the terminal WL in BSS to which a base station AP 
belongs, and a broadcasting communication link is also more than the minimum level 
encjow concerned, and can choose beforehand the thing of the security level 
currently moreover supported at all the terminals that should receive it. That is, as 
shown in step S5 of drawing 7 , when connection is refused from a base station AP 1 , 
different security level of desirable more high level from the security level notified 
previously is notified, and what connection requires again is made. The connection 



request only of the count M of maximum predetermined becomes possible, notifying 

one [ at a time ] the security level which a terminal WL1 3 has. 

[0068] 

You may make it a base station AP 1 notify all the security level more than security 
level encjow of the minimum level beforehand set as BSS1, or minimum level encjow 
which the base station AP 1 is supporting to the terminal WL13 of connection-request 
origin. You may make it notify this notice using current a non-used frame among the 
administrative frame of the MAC frame specified to IEEE802.11, and the frame for 
control. For example, a subtype corresponds with an administrative frame and frames, 
such as "0000" - "1001", correspond [ a subtype ] with frames, such as "0110" - 
"01 1 1", and the frame for control. When a base station AP 1 refuses connection of a 
terminal, after transmitting the authentication frame of ATSN=2, this intact frame is 
transmitted and you may make it notify all the security level more than minimum level 
encjow to a terminal WL13 in step S4 shown in drawing 7 . Moreover, step S4 or a 
frame intact before setting step S6 and transmitting the authentication frame of 
ATSN=2 may be transmitted, and all the security level more than minimum level 
encjow may be notified to a terminal WL13. Furthermore, during processing of 
authentication or an association, before transmission and reception of a data frame 
begin, the suitable time is chosen at its own discretion, and an access point AP 1 
transmits an intact frame, and you may make it notify all the security level more than 
minimum level encjow to a terminal WL13. 
[0069] 

As shown in the frame of the association of the MAC frame specified to IEEE802.1 1 at 
drawing 9 (a), drawing 9 (b), and drawing 9 (c), the reserve field is prepared as a free 
space -in "the KYAPA kinky thread tea information (Capability information)" on the 
frame body. You may make it a base station AP 1 notify all the security level more 
than security level encjow of the minimum level of BSS1, or the minimum level 
encjow concerned which the base station AP 1 is supporting to the terminal WL13 of 
connection-request origin at a terminal WL13 using this free space. 
[0070] 

thus, the case where the terminal WL1 1 which belongs to a base station AP 1 in BSS1 , 
and the terminal WL13 which does not belong in BSS1 other than WI12 tend to 
connect with the operation gestalt of the above 1 st — first 

(1) This terminal WL13 notifies the security level of terminal WL13 self to a base 
station AP 1. In the flow shown in drawing 7 , this notice uses the frame of 
authentication. 

[0071] 

(2) In a base station AP 1, the security level notified from this terminal WL13 is the 
security level currently supported in the base station AP 1, and moreover, when it is 
more than the security level of minimum level encjow beforehand set to BSS1 , permit 



connection of a terminal WL13 and continue processing actuation for connection. 
However, when the security level notified from a terminal WL13 does not fulfill the 
security level of the minimum level beforehand set to BSS1, connection of a terminal 
WL1 3 is refused. 
[0072] 

(3) When permitting the connection from a terminal WL13, recognition processing for 
sharing, the information, i.e., the code parameter, for encryption and a decryption, is 
performed if needed. 
[0073] 

Thus, according to the operation gestalt of the above 1st, radio which secured 
minimum security level by the encryption beforehand defined into each group for 
every basic group of wireless LAN called BSS is realized. 
[0074] 

Preferably, if the security level of record level encjiigh is notified by the base station 
AP 1 among the security level on which terminal WL13 self supports a terminal WL13 
in the above (1), the opportunity for a base station AP 1 to refuse connection of a 
terminal WL1 3 will decrease. Moreover, if the security level of record level enc_high is 
notified to a base station AP 1, by 1 time of the connection request, the propriety of 
connection with the base station AP 1 concerned can be judged, and useless traffic 
can be reduced as a result. 

[0075] Moreover, as for the base station or each terminal in BSS1, it is desirable to 
register into a security table the security information of the security level more than 
minimum level encjow beforehand set to BSS1 used in case it communicates with the 
base station in BSS1 or a terminal, respectively. A base station or each terminal can 
choose beforehand the minimum security level which is not denied connection as 
security level notified in case a connection request is carried out to the desired 
terminal and desired base station which are pinpointed in the address with reference 
to this security table. 
[0076] 

Although only one security level which expects that a terminal WL13 uses by the 
communication link with a base station AP 1 in step S2 is notified to the base station 
AP 1 with the operation gestalt of the above 1st, it is clear that it is not what is 
restricted in this case. Even if it is not all that terminal WL13 self has, or all, two or 
more security level may be notified to a base station AP 1 from a terminal WL13. 
Moreover, only security level enc.high of a record level may be notified to a base 
station AP 1 from a terminal WL13 among the security level which a terminal WL13 
supports. 
[0077] 

In step S2, the processing actuation of the base station AP 1 in the case of notifying 
two or more security level, even if it is not all altogether which terminal WL13 self has 



is explained. 
[0078] 

In step S2 shown in drawing 7 , two or more security level which terminal WL13 self 
has is transmitted to a base station. It judges whether the security level which is the 
security level more than security level encjow equivalent to the minimum level [ in / 
in this security level in a base station AP 1, and / at step S3 / BSS1 ], and 
self-equipment is moreover supporting is contained. It is judged that a base station 
AP 1 permits connection of a terminal WL13 when the security level currently 
supported is contained. Moreover, it is judged that a base station AP 1 refuses 
connection of a terminal WL13 when the security level currently supported is not 
contained. When refusing connection of a terminal WL13, it progresses to step S4. 
When permitting connection of a terminal WL13, both the base stations AP 1 choose 
the security level more than minimum level encjow in BSS1 next among the security 
level which the terminal WL13 and the base station AP 1 are supporting. A base 
station AP 1 chooses one of them, when two or more security level more than 
minimum level encjow in BSS1 exists. What is necessary is just to choose one of 
them, even if it is those any although there are the minimum thing or the highest thing, 
and other various selection criteria in it about this selection. A base station AP 1 
makes one selected security level the security level used for the communication link 
between terminals WL13. For example, supposing the security level notified from the 
terminal WL13 is "enc.O" and "end", the connection with the base station AP 1 of a 
terminal WL13 will be permitted, and the security level of the communication link 
between a terminal WL13 and a base station AP 1 will be chosen with "enc.1." 
[0079] 

When this selected security level needs to be notified to a terminal WL13, before 
transmitting the authentication frame of ATSN=2 at step S6 of drawing 7 , an intact 
frame etc. may be used now among the administrative frame of the MAC frame 
specified to above-mentioned IEEE802.1 1, and the frame for control. 
[0080] 

At a terminal WL13, subsequent processing can be prepared in response to the notice 

of the selected security level. 

[0081] 

Within BSS1, if it is the security level more than minimum level encjow beforehand 
set to BSS1, it is not necessary to necessarily communicate on the same security 
level. 
[0082] 

Moreover, you may make it communicate on different security level according to a 
connection partner within BSS1. That is, if a base station AP 1 is the security level 
more than minimum level encjow beforehand set to BSS1, especially limitation will not 
have it about communicating with which terminal on which security level here. The 



secrecy nature of radio can be improved by communicating on the security level from 

which a base station AP 1 differs for every terminal. 

[0083] 

Although drawing 7 was explained as actuation at the time of connection between the 
terminals WL13 and base stations AP 1 which have not joined BSS1, it may transpose 
the terminal WL13 of the above-mentioned explanation to each of terminals 
WL11-WL12 which has joined BSS1. If the procedure shown in drawing 7 is followed, 
respectively also when [ of terminals WL1 1-WL12 ] it is going to connect with a base 
station AP 1, security level different each time can be notified at step S2 of drawing 7 , 
and the security level according to the purpose can be changed at every connection. 
In this case, since the security level of the minimum level of BSS1 is registered into 
the security table of each terminal, the security level more than this minimum level is 
chosen among the security level which each terminal supports, and it is notified at 
step S2. Moreover, even if it does not change security level, code parameters (in the 
case a private key, IV, etc. of WEP) can also be changed in the case of subsequent 
authentication. 
[0084] 

Similarly, the procedure in the case of the connection request from the terminal of 
explanation of drawing 7 to a base station is applicable to a base station also as a 
procedure in the case of a connection request from the base station belonging to 
mutually different BSS. That is, it can transpose to the base station AP 2 of BSS2 in 
the base station belonging to other BSS which is [ terminal / WL1 3 / of explanation of 
drawing 7 ] different in a base station AP 1 , and is [ base station / AP 2 ] different in 
BSS1, for example, here. Thus, according to the 1st operation gestalt, also in the 
communication link, i.e., DS communication link, between base stations, a 
communication link is realized above each minimum security level. 
[0085] 

In case it communicates with the terminal WL12 in BSS1, for example, other terminals 
in BSS1 with the same terminal WL1 1, for example, a terminal, you may connect and 
communicate to a base station AP 1 through a base station AP 1, and direct 
communication may surely be carried out between terminals without a base station 
AP 1. 
[0086] 

When it is going to connect with terminals WL1 1-WL12 and the partner by whom the 
base station AP 1 is registered into each security table, the authentication for 
transmitting and receiving security level and a code parameter etc. may be omitted. 
What is necessary is just to communicate a requiring agency with reference to the 
security table at the side which received the connection request, on the security level 
more than the minimum level beforehand defined within BSS1, if the transmitting 
origin of the frame is registered into the own security table. 



[0087] 

Only the security information of the security level used by the communication link in 
the meantime in the past may be registered into a base station AP 1 and each 
security table of terminals WL11-WL12 for every connection partner. This security 
information registered is equivalent to the security level more than minimum level 
encjow in BSS1. 
[0088] 

The security level set as the security information and BSS1 of all security level which 
the each supports as the minimum level may be registered to each equipment which 
constitutes BSS1 as, as for all of the base station AP 1 in BSS1, and the security 
table of terminals WL11-WL12, the same contents indicated and shown at drawing 5 
at the time of initialization. 
[0089] 

Moreover, within BSS1, "end" which is the minimum security level which also 
permits a base station AP 1 and terminals 11-WL 12 by BSS1 supports. Therefore, 
either of the terminals WL11-WL12 shall be enciphered in a data frame etc. on the 
minimum security level which permits the frame body of the frame within BSS1 when 
broadcasting, a multicast and. Thereby, as BSS1, the minimum security level to permit 
is securable. 
[0090] 

Moreover, with the operation gestalt of the above 1 st, the recognition processing for 
sharing a code parameter between the connection-request point with the check of 
the security level which is supporting connection-request origin connection-request 
origin is summarized at the time of the authentication to which it is specified at 
IEEE802.11, and is performed. However, these two processings can be divided and 
processing can also be performed at the time of the association to which the former is 
specified at IEEE802.11. Moreover, also when performing an association previously, 
next performing authentication, it thinks. In this case, two above-mentioned 
processings may be summarized at the time of authentication, and may be performed, 
and it may be made to carry out by dividing at the time of an association and 
authentication. However, when dividing two above-mentioned processings, the 
direction which performed the check of security level in advance of the recognition 
processing for sharing a code parameter preferably is desirable when securing 
security. 
[0091] 

(2nd operation gestalt) 

The communication system concerning the 2nd operation whose base station of BSS1 
as minimum security level shown in drawing 1 defined beforehand in broadcasts the 
minimum security level defined by BSS1 concerned is explained. In this explanation, in 
the communication system concerning the 2nd operation gestalt, it omits and that 



different point is explained with reference to drawing 12 about the same explanation 

as the 1st operation gestalt. 

[0092] 

In the communication system concerning the 2nd operation gestalt the minimum 
security level of the BSS concerned is written in the beacon frame specified to 
IEEE802.1 1, and this beacon frame is transmitted. 

Drawing 1 1 shows the format of the frame body of the beacon frame which has the 
structure of the MAC frame specified to IEEE802.1 1. In "the KYAPA kinky thread tea 
information (Capability information)" on this beacon frame, the reserve field is 
prepared as a free space. Even if a base station AP 1 is not all the security level or all 
more than the security level of the minimum level of BSS1, or the minimum level 
concerned which the base station AP 1 is supporting, it writes two or more security 
level in this reserve field, and notifies that security level to Terminal WL 
[0093] 

On a beacon frame, even if the transmission-control section 14 of a base station AP 1 
is not all the security level or all more than the security level of the minimum level of 
BSS1, or the minimum level concerned which the base station AP 1 is supporting, it 
writes in and broadcasts two or more security level. As shown in step S21 of drawing 
1_2 , a terminal receives this beacon frame. The terminal WL13 which has not joined 
BSS1, for example, the terminal shown in drawing 1 , can receive a beacon frame. 
[0094] 

In the receive section 101 of a terminal WL13, the security level of the minimum level 
of BSS1 written in the beacon frame received as shown in step S22 is taken out, and 
it is confirmed whether the thing more than the minimum level of BSS1 is in the 
security level which the terminal WL13 is supporting as shown in step S23. Here, all 
the security level that the terminal WL13 is supporting may be beforehand registered 
into the security table of a terminal WL13. When there is nothing more than the 
minimum level of BSS1 in the security level of a terminal WL13, the connection with a 
base station AP 1 is stopped, and ends the connection processing. 
[0095] 

Here, the security level of the minimum level of BSS1 is "end", and since the 
terminal WL13 is supporting "enc.0" and "end", a terminal WL13 is possible 
[ terminal ] for a base station AP 1 and connection. Since there is a thing more than 
the minimum level of BSS1 in the security level of a terminal WL13, a terminal WL13 
chooses the security level this "end", and starts the connection request to a base 
station AP 1. That is, the security level which progressed to step S2 of drawing 7 , and 
was chosen is notified, and the same actuation as explanation of the 1st operation 
gestalt is performed hereafter. 
[0096] 

However, since it is expectable in this case that the security level more than the 



minimum level is surely notified from Terminal WL side, step S3 of drawing 7 may be 
skipped in a base station AP 1. Moreover, the inside of the security level on which 
terminal WL13 the very thing has a terminal WL13 in step S2 t The security level more 
than the minimum level of BSS1 notified with the beacon frame is chosen (when there 
is two or more such security level), all they, some of requests of them, or 1 of them 
may be chosen, for example, security level may choose the highest thing, the minimum 
thing, or a desired thing. What is necessary is just to notify to a base station AP 1. 
[0097] 

Thus, since a terminal WL13 starts connection after choosing beforehand the partner 
who can connect on the security level which self supports when the base station AP 1 
of BSS1 where minimum security level was defined beforehand broadcasts the 
minimum security level of the BSS concerned, unnecessary traffic is reducible. 
[0098] 

Moreover, a terminal WL13 can transmit the demand frame (probe request) of probe 
to a base station AP 1, and a base station AP 1 can also notify security level by the 
response frame (probe response) of probe to it. 
[0099] 

(3rd operation gestalt) 

Although the operation gestalt of the above 1st explained the case where the 
authentication and the association which were specified to IEEE802.11 were carried 
out in this order, carrying out authentication is also assumed after performing an 
association previously, the case of BSS1 which attached in this case and was shown 
in drawing 1 with the 3rd operation gestalt — an example — ** — it carries out and 
explains with reference to the flow chart shown in drawing 13 . 
[0100]- 

Here, the case where the terminal WL13 which has not joined the base station AP 1 of 
BSS1 at BSS1 requires connection like the 1st operation gestalt is explained, and only 
a different part from the 1st operation gestalt is explained. 
[0101] 

That a terminal WL13 should receive the beacon frame transmitted from a base 
station AP 1 as shown in step S31, and it should connect it to a base station AP 1 
after that, as shown in step S32, the demand frame of an association is transmitted to 
a base station AP 1. 
[0102] 

As are mentioned above, and shown in the frame of the association of the MAC frame 
specified to IEEE802.1 1 at drawing 9 (a), drawing 9 (b), and drawing 9 (c), a free space, 
i.e., the reserve field, is prepared in "the KYAPA kinky thread tea information 
(Capabilityinformation)" on the frame body. The transmitting section 107 of a terminal 
WL13 writes at least one of the security level which is supporting the terminal WL13 in 
this reserve field of a request in this reserve field, and as shown in step S32, it 



transmits to a base station AP 1. For example, in the transmitting section 107 of a 
terminal WL13, the data in which one "end" in all the security level ("enc.0""end ") 
that self has is shown shall be written in the reserve field, and it shall transmit to a 
base station AP 1 here. 
[0103] 

Processing actuation of the base station AP 1 which received this is the same as that 
of the 1st operation gestalt. That is, the reception-control section 13 of a base 
station AP 1 compares with the security level of the minimum level of BSS1 which the 
security level of the terminal WL1 3 currently written in the received demand frame 
(Association Request) of an association is registered into drawing, and is registered 
into the security table 21 of a base station AP 1 in this security level. The security 
level of this terminal WL13 notified from the terminal WL13 is the security level which 
is supporting the base station AP 1, and, moreover, it is judged at the time more than 
the security level of the minimum level in BSS1 that connection of a terminal WL13 is 
permitted as shown in step S33. Moreover, at the time under of the security level of 
the minimum level of BSS1, it is judged that connection of a terminal WL13 is refused 
as shown in step S33. That is, when refusing connection of a terminal WL13, according 
to a convention of IEEE802.1 1 , as shown in step S34, the code of the purport whose 
connection is failure is written in the response frame (Status code of Association 
Response) of an association, and a terminal WL13 is answered. By receiving this frame, 
a terminal WL1 3 judges that it was refused by connection from a base station AP 1, 
and interrupts connection procedure in this phase. 
[0104] 

On the other hand, when permitting connection of a terminal WL13, for the 
communication link using "end" which is the security level of the minimum level of 
BSS1 notified from the terminal WL13, according to a convention of IEEE802.1 1, the 
code of the purport whose connection is a success is written in the response frame 
(Status code of Association Respose) of an association, and as shown in step S36, a 
terminal WL1 3 is answered. 
[0105] 

in response, a terminal WL13 shows to step S37 according to a convention of 
IEEE802.1 1 for the authentication processing for sharing a code parameter between a 
terminal WL13 and a base station AP 1 — as — an authentication frame — 
transmitting . Processing of the authentication after transmission of an authentication 
frame is performed according to a convention of IEEE802.11. Since a convention of 
IEEE802.1 1 is followed about this processing, that explanation is omitted. 
[0106] 

In addition, while the effectiveness same [ of the 1st operation gestalt ] also in this 
3rd operation gestalt is expectable, it is not necessary to say that many variations 
which were explained with the 1 st operation gestalt can be applied. 



[0107] 

(4th operation gestalt) 

Next, while a certain terminal moves between the area of two or more base stations, 
when communicating, the technique of securing each area for every BSS, i.e., security 
level, is explained taking the case of the wireless LAN system shown in drawing 1 . 
The technique for securing the minimum security level which was alike to the situation, 
i.e., BSS to which each base station belongs under the so-called mobile environment, 
that Terminal WL is moved, respectively, and was defined beforehand is explained in 
this 4th operation gestalt. As the operation gestalt of the above 1st explained 
fundamentally, in case the connection request from a terminal is received, the point of 
performing authentication processing for having security level notified from the 
terminal concerned, permitting connection of the terminal concerned only when it is 
more than the minimum security level as which it was beforehand determined to 
self-BSS, and sharing a code parameter between a base station and a terminal is the 
same in the base station of each BSS. 
[0108] 

For example, when the terminal WL13 of drawing 1 has connected with a base station 
AP 2 and it has moved into the area of a base station AP 1 in the wireless LAN 
system specified to IEEE802.1 1, rear sociation (Reassociation) is performed between 
a terminal WL13 and a base station AP 1. And a data frame is transmitted and 
received after this rear sociation procedure is completed normally. 
[0109] 

With this 4th operation gestalt, the security level of a terminal WL13 is notified to a 
base station AP 1 from a terminal WL13 using a free space in the demand frame 
(Reassociation Request) of rear sociation. 
[0110] 

Hereafter, in the wireless LAN system shown in drawing 1 , a terminal WL13 moves to 
the area of a base station AP 1 from the area of a base station AP 2, and the case 
where rear sociation is carried out to a base station AP 1 is explained with reference 
to the flow chart shown in drawing 15 . In addition, in drawing 15 , the same sign is 
given to the same part as drawing 13 , the explanation is omitted, and a different 
procedure is explained. 
[0111] 

As shown in step S31, after receiving the beacon frame transmitted from a base 
station AP 1, a terminal WL13 transmits the demand frame of rear sociation to a base 
station AP 1 that it should connect with a base station AP 1 t as shown in step S51. 
[0112] 

As shown in the frame of the rear sociation of the MAC frame specified to IEEE802.1 1 
at drawing 14 (a) - (c), a free space, i.e., the reserve field, is prepared in "Capability 
information" of the frame body. 



[0113] 

The transmitting section 107 of a terminal WL13 writes one of the at least requests of 
the security level which is supporting the terminal WL13 in this reserve field, as shown 
in step S51, and it transmits to a base station AP 1. For example, in the transmitting 
section 107 of a terminal WL13, the data in which "end" is shown among all the 
security level ("enc.O"" end") that self has are written in, and it transmits to a base 
station AP 1 here. 
[0114] 

Since processing actuation of the base station AP 1 which received the frame of this 
rear sociation is the same as explanation of drawing 1 3 , refer to the explanation about 
step S33 of drawing 1 3 for it. However, when refusing connection of a terminal WL13 
at step S33, according to a convention of IEEE802.1 1 , the code of the purport whose 
connection is failure is written in the status code of a rear sociation response frame, 
and as shown in step S52, a letter is answered by the terminal WL13. Moreover, when 
permitting connection of a terminal WL13, according to a convention of IEEE802.11, 
the code of the purport whose connection is a success is written in the status code of 
a rear sociation response frame, and as shown in step S53, a letter is answered by the 
terminal WL13. 
[0115] 

When a base station AP 1 permits connection of a terminal WL1 3, to share a code 
parameter js needed between a base station AP 1 and a terminal WL13. Therefore, as 
shown in step S37 of drawing 15 - step S44, according to a convention of IEEE802.1 1, 
the authentication processing for sharing a code parameter between a terminal WL13 
and a base station AP 1, i.e., the procedure of authentication, may perform like 
drawing 13 . 
[0116] 

Moreover, the address of the base station AP 2 as for which the terminal WL13 is 
making current connection, i.e., a base station, is described by the demand frame of 
the rear sociation from a terminal WL13. "The present AP address (Current AP 
address)" with which this address is shown in drawing 1 4 (a) - (c) corresponds. Then, 
as shown in drawing 1 5 , the procedure of authentication does not perform but a base 
station AP 1 is connected to a base station AP 2 based on "the present AP address 
(Current AP address)." And a base station AP 1 requires a transfer of the security 
information about the terminal WL13 registered into the security table of a base 
station AP 2, and you may make it register security information into the security table 
after a transfer of the security information. Thereby, a code parameter is shared 
between a base station AP 1 and a terminal WL13. Therefore, the data frame 
enciphered on the same security level can be transmitted [ after connection is 
permitted from the base station AP 1 where a terminal WL13 is shown at step S53 / a 
terminal WL13 ] and received between base stations AP 1 like the communication link 



between this terminal WL13 and base station AP 2. 
[0117] 

In addition, in the communication system concerning this 4th operation gestalt, while 
the same effectiveness is expectable also in the 1 st operation gestalt, it is not 
necessary to say that many variations which were explained with the 1 st operation 
gestalt can be applied. 
[0118] 

(5th operation gestalt) 

as mentioned above, the 1- in the communication system concerning the 4th 
operation gestalt, it becomes possible to realize a communication link on the security 
level more than the minimum level as which the terminal WL13 was beforehand 
determined to BSS1 to which a base station AP 1 belongs between base stations AP 
1. However, if the security level of a communication link in the meantime is lower than 
the minimum level beforehand set to BSS1 when a terminal WL13 communicates with 
the terminal and other radio stations which have not joined BSS1 other than base 
station AP1 at the same time a terminal WL13 communicates with a base station AP 1, 
it cannot be said as a result that the security level of the minimum level of BSS1 was 
secured. Then, in the communication system concerning this 5th operation gestalt, 
even if a terminal WL13 carries out a connection request to a base station AP 1 when 
wireless connection is already made with a certain terminal WL14 as a terminal WL13 
shows drawing 16 , according to the procedure explained below, the security of the 
minimum level beforehand set to BSS1 is securable. 
[0119] 

When wireless connection of the terminal WL13 is made in other terminals and base 
stations on the security level with which the minimum security level beforehand set to 
BSS1 is not filled, it is a base to prevent from connecting a terminal WL13 to the base 
station or terminal in BSS1. Therefore, in order to connect with the terminal and base 
station in BSS1, to cut the wireless connection with such low security level 
beforehand, or to raise the curie tee level of the wireless connection more than the 
minimum level of BSS1 is needed. 
[0120] 

the procedure the following and for it — the 1- explanation is omitted about the 
common procedure explained with the 4th operation gestalt, and a different procedure 
is explained. 
[0121] 

In drawing 16 , the same sign is given to the same part as drawing 1 , and the 
explanation is omitted. The security level which is supporting the terminal WL14 
shown in drawing 16 presupposes that it is "enc.0." In case the demand of the 
connection of a terminal WL13 with a base station AP 1 is started, wireless 
connection of the terminal WL13 is already made at a terminal WL14, and 



communication link security level in the meantime assumes that it is "enc.O." 
[0122] 

In such a condition, the case where a terminal WL13 starts a connection request to 

the base station AP 1 of BSS1 is explained. 

[0123] 

First, as the 2nd operation gestalt explained, the case where the minimum security 
level beforehand set to BSS1 with the beacon frame is notified is explained with 
reference to the flow chart shown in drawing 1 7 . In this case, a terminal WL13 gets to 
know that the minimum security level which makes wireless connection is "end" 
from the received beacon frame to a base station AP 1. Then, a terminal WL13 
performs processing actuation shown in drawing 17 , before progressing to step S32 
of drawing 1 3 . 
[0124] 

In step S61 of drawing 17 , it is checked whether the security level more than 
minimum level "end" permitted by BSS1 is prepared for the security level of a 
terminal WL13. When the security level more than "end" is prepared for the terminal 
WL13, it progresses to step S62. In this step S62, it is confirmed whether be more 
than minimum level "end" by which the security level of the communication link 
between the terminal WL14 with which wireless connection of the current terminal 
WL13 is made, i.e., a terminal, and a terminal WL13 is permitted by BSS1. If it is more 
than minimum level "end" by which the security level of the communication link 
between a terminal WL13 and a terminal WL14 is permitted by BSS1, it will progress to 
step S64 and handshaking between a terminal WL13 and a base station AP 1 will be 
started. That is, in a terminal WL13, processing after step S32 of drawing 13 is 
performed. On the other hand, when the security level between a terminal WL13 and a 
terminal WL14 does not fulfill the minimum level ("end") permitted by BSS1, step 
S63 HE progress and the wireless connection between a terminal WL13 and a terminal 
WL14 are cut, and it progresses to step S64. 
[0125] 

As mentioned above, since the security level of the communication link between a 
terminal WL13 and a terminal WL14 is "enc.O", it progresses to step S63 from step 
S62, and the wireless connection between a terminal WL13 and a terminal WL14 is cut. 
Then, DIO sentimental KESHON (Deauthentication) specified to IEEE802.1 1 is ended, 
and a terminal WL13 progresses to step S64. 
[0126] 

Thus, when a terminal WL13 has the security level lower than the security level 
broadcast from the base station AP 1 by which a connection request is carried out 
between the terminals WL14 which are making current connection, the wireless 
connection between a terminal WL13 and a terminal WL14 is cut beforehand, and a 
connection request is made a base station AP 1 from a terminal WL13. Therefore, 



wireless connection between a terminal WL13 and a base station AP 1 is made 

certainly, holding the minimum security level of BSS1. 

[0127] 

In addition, in step S63, once cutting the wireless connection between a terminal 
WL13 and a terminal WL14, wireless connection of a terminal WL13 and the terminal 
WL14 may be again made on the security level more than the minimum level of BSS1. 
[0128] 

Although the explanation mentioned above explained the case where wireless 
connection of the terminal WL13 was made only with one of the terminals WL14, as 
well as the above when wireless connection of the terminal WL13 is made in two or 
more terminal or two or more base stations, each of the security level is checked. If 
the security level is not more than the minimum level of BSS1, connection between a 
terminal WL13 and other terminals will once be cut and a terminal WL13 is set up in 
security level more than the minimum level of BSS1, and may start connection with a 
base station AP 1. 
[0129] 

In addition, although the above-mentioned explanation explained taking the case of 
the case of a terminal WL14 and the terminal WL13 which is making wireless 
connection, the procedure of a top Norikazu ream is applicable also to processing 
actuation of the base station AP 2 of other BSS2 which is different in BSS1. Thus, 
when both the sides that received the side and connection request which emitted the 
connection request are not a terminal but base stations, DS communication link from 
which minimum security level was secured in two or more BSS, respectively is 
attained. Wireless connection may be made with two or more terminals and a base 
station in the base station concerned, and when the side which emitted the 
connection request is a base station, like [ in such a case ] the above, each of the 
security level is checked, and as long as it is not a thing more than the minimum level 
of BSS which it is going to connect from now on, an access point may once cut 
connection with Terminal WL and other access points. Then, what is necessary is to 
set up the security level more than the minimum level of BSS which an access point 
tends to connect after this if needed, and just to make it start connection with the 
base station of the request concerned after that. 
[0130] 

Next, as the 1st, 3rd, and 4th operation gestalt explained, the case where the security 
level of a terminal WL13 is checked is explained with reference to the flow chart 
shown in drawing 18 in the case of authentication, an association, and rear sociation. 
In addition, the processing actuation shown in drawing 18 supports step S33 of step 
S3 of drawing 7 , drawing 13 , and drawing 15 etc. 
[0131] 

**1 shown below while a terminal WL13 writes the security level of a terminal WL13 in 



a free space on the demand frame of authentication, or the demand frame of an 
association or rear sociation as mentioned above when checking the security level of 
a terminal WL1 3 since — **2 ** — at least one item is written in the free space or 
other free space. 
[0132] 

**1 The terminal with which wireless connection of the current terminal WL13 is made; 

or existence of a base station. 

[0133] 

**2 A terminal WL13, the terminal by which current wireless connection is made, or 
security level between base stations 

Here, when wireless connection of the terminal WL13 is made in two or more terminals 

or base stations, the security level about the all is written in a free space. 

[0134] 

In a base station AP 1, as shown in step S71, a frame is received, and first, as shown 
in step S72, the security level of a terminal WL13 is checked. When not filling the 
minimum security level as which the security level of a terminal WL13 is determined to 
BSS1, it progresses to step S73 and connection is refused. That is, as the 1st, 3rd, 
and 4th operation gestalt explained, a connection refusal is notified to a terminal WL13 
with the frame of authentication, an association, or rear sociation. 
[0135] 

On the other hand, when the security level of a terminal WL13 is the security level 
which a base station AP 1 supports and it is more than the minimum security level 
moreover set to BSS1 next, it progresses to step S74. Above-mentioned **1 Or **2 
When it judges that the terminal or base station which are making current wireless 
connection do not exist in a terminal WL13 from ******, it progresses to step S75 and 
wireless connection of a terminal WL13 is permitted. That is, as the 1st, 3rd, and 4th 
operation gestalt explained, while authorization of wireless connection is notified to a 
terminal WL1 3 with the frame of authentication, an association, or rear sociation, it 
performs similarly with consecutive processing having mentioned above. Step S6 of 
drawing 7 , step S36 of drawing 13 , and the step S53 grade of drawing 15 are 
equivalent to this processing. Above-mentioned **1 Or **2 When it judges that the 
terminal and base station which are making current wireless connection exist in a 
terminal WL13 from ******, it progresses to step S76. 
[0136] 

In step S76, to the information received at step S71, **2 When it is alike and shown 
"the security level between a terminal WL13 and the terminal WL14 which is making 
current wireless connection" is contained, the security level is checked. When it is 
more than the minimum security level as which the security level between terminals 
WL14 is determined to BSS1, it progresses to step S75 and wireless connection of a 
terminal WL13 is permitted. When the security level between terminals WL14 does not 



fulfill the minimum security level set to BSS1, on the other hand, to the information 
received at step S71 Above-mentioned **2 When it is alike and the shown information 
is not included (i.e., when the security level between terminals WL14 is unknown), it 
progresses to step S77 and the connection request from a terminal WL13 is refused. 
As the 1st, 3rd, and 4th operation gestalt explained, refusal of this connection request 
is notified to a terminal WL13 with the frame of authentication, an association, or rear 
sociation. 
[0137] 

In addition, the purport which refuses a connection request is not notified but you may 
make it the frame of authentication, an association, or rear sociation notify similarly 
the demand of a purport with a terminal WL14 which directs cutting of wireless 
connection at step S77. In this case, it can be judged immediately that a terminal 
WL13 is connectable with a base station AP 1 if the wireless connection with a 
terminal WL14 is cut. Therefore, after cutting the wireless connection with a terminal 
WL14 (for example, after a terminal WL13 ends DIO sentimental KESHON 
(Deauthentication) specified to IEEE802.1 1), the connection request of it can be again 
carried out to a base station AP 1 . 
[0138] 

Moreover, the administrative frame of the MAC frame specified to IEEE802.1 1 at step 
S77 after refusing a connection request, Among the frames for control, in the case of 
a current a non-used frame, for example, an administrative frame You may make it a 
subtype notify the minimum security level from which a subtype is permitted by BSS1 
using frames, such as "0000" - "1001", in the case of frames, such as "0110" - 
"0111", and the frame for control. If a terminal WL14 can support the minimum 
security level concerned when there is a notice of the minimum security level 
permitted by BSS1, a terminal WL13 can perform a connection request to a base 
station AP 1 again, after reconnecting with the security level. 
[0139] 

Moreover, the above-mentioned explanation explains taking the case of the case 
where the terminal WL13 is making wireless connection only with one of the terminals 
WL14. however, the existence of the terminal which has already connected the 
terminal WL1 3 like the above even if it is, when wireless connection is being made with 
two or more terminals and a base station, or a base station — each of the security 
level may be notified preferably. When two or more security level of the radio already 
connected from the terminal WL13 has been notified, a base station AP 1 should just 
check the security level about the each in step S76. 
[0140] 

As mentioned above, when not fulfilling the minimum security level of the side in which 
it received the connection request when the security level of this wireless connection 
was unknown even if the side which emitted the connection request was already the 



case where wireless connection was being made with other terminals and a base 
station, the minimum security level of the side which received the connection request 
can be secured by refusing the connection request concerned. In addition, the 
above-mentioned explanation is applicable also as processing actuation of the base 
station AP 2 of other BSS2 which is different in BSS1, although explained taking the 
case of the case of a terminal WL14 and the terminal WL13 which is making wireless 
connection. Thus, when both the sides that received the side and connection request 
which emitted the connection request are not a terminal but base stations, DS 
communication link from which each minimum security level was secured in two or 
more BSS is attained. When the side which emitted the connection request is a base 
station, wireless connection may be made with two or more terminals and a base 
station in the base station concerned. As for the side which emitted the connection 
request it is desirable preferably like [ in such a case ] the above the existence of the 
already connected terminal or a base station and to notify each of the security level: 
What is necessary is just to check the security level about the each in step S76 in the 
side which received the connection request, when two or more security level of the 
already connected radio has been notified from the side which emitted the connection 
request. 
[0141] 

(6th operation gestalt) 

In the wireless system concerning the operation gestalt of the above 1st, although the 
case where a connection request was carried out to a base station was explained, in 
the case of the connection request from a terminal to a terminal, the same technique 
is applicable. Here, as shown in drawing 1 9 , it explains to the terminal WL12 belonging 
to BSS1 taking the case of the case where the terminal WL15 which has not joined 
carries out a connection request to BSS1. The security level which can support a 
terminal WL15 is "enc.O." Since BSS1 is joined, a terminal WL12 needs to secure the 
minimum security level beforehand set to BSS1, in case a terminal WL12 
communicates. Therefore, the same processing actuation as what was shown in 
drawing 7 between a terminal and a base station is carried out between a terminal 
WL12 and a terminal WL15. 
[0142] 

Drawing 20 shows the procedure between the terminals WL12 and terminals WL15 in 
the case of carrying out a connection request from a terminal WL15 to a terminal 
WL1 2. In addition, in drawing 20 r the same sign is given to the same part as drawing 7 , 
explanation is omitted, and a point of being below different is explained. 
[0143] 

In drawing 20 , processing actuation in the base station shown in drawing 7 is 
equivalent to the processing actuation kicked to a terminal WL12. Therefore, step S1 
which a beacon frame transmits is made unnecessary. Other step S2 - step S12 are 



the same as that of drawing 7 . In addition, the procedure of an association is made 

unnecessary. 

[0144] 

As shown in drawing 20 , the near terminal WL12 which received the connection 
request also on the occasion of a connection setup between a terminal WL12 and a 
terminal WL15 is checking the security level of the terminal WL15 of the side which 
emitted the connection request. Here, the security level of the terminal of the side 
which emitted the connection request is the security level which the near equipment 
which received the connection request supports, and if it is more than the minimum 
security level of BSS1 to which the near terminal which received the connection 
request moreover belongs, connection of a terminal WL15 will be permitted. If it is 
below the minimum security level of BSS1 to which the near terminal which is not the 
security level which the near equipment with which the security level of the terminal 
of the side which emitted the connection request received the connection request 
supports, or received the connection request belongs, connection of a terminal WL15 
will be refused. If connection is authorization, manual processing actuation for sharing 
the code parameter corresponding to the security level concerned will be performed. 
[0145] 

In addition, when a terminal WL12 receives a connection request from a terminal WL13, 
a terminal WL12 performs processing actuation as shown in drawing 20 irrespective of 
whether the terminal WL12 is making wireless connection with the base station AP 1. 
[0146] 

In drawing 19 , the mode in which a terminal WL15 transmits a direct data frame to a 
terminal WL12 may be applied. This mode is called ad hoc (ad hoc) mode. This ad hoc 
mode -can be performed without passing through authentication. Ad hoc mode is 
explained about processing actuation with a terminal WL12 with reference to the flow 
chart shown in drawing 21 . 
[0147] 

A terminal WL12 receives the data frame addressed to the direct terminal WL12, 
without minding a base station from a terminal WL15, as shown in step S81. According 
to the convention of IEEE802.11, such a data frame can be easily judged from both 
"To DS" and "From DS" under frame control of the MAC frame shown in drawing 4 
being "0." 
[0148] 

In the receive section 101 of a terminal WL12, when this data frame is received, it is 
confirmed whether as shown in step S82, the security information corresponding to 
the address of that transmitting origin is registered into the security table 110 of a 
terminal WL12. 
[0149] 

It means what is defined beforehand that it is the security level more than the 



minimum level as which the terminal WL15 was beforehand determined to BSS1 
registered into the terminal WL12 and the security table concerned that the security 
information of a terminal WL15 is registered into the security table, and it had 
communicated in the past, or communicates on such security level. Therefore, it 
progresses to step S83, and a terminal WL12 transmits the ACK frame to the data 
frame which the convention received to EEE802.11 to a terminal WL15, and starts 
transmission and reception of the data between terminals WL15. 
[0150] 

On the other hand, in step S82, since the security level of a terminal WL15 is unknown 
as [ this ] when the security information of a terminal WL15 is not registered into a 
security table, between terminals WL15, the communication link of a terminal WL12 is 
impossible. Therefore, it progresses to step S84 and the above-mentioned ACK frame 
notifies the purport which requires authentication of the terminal WL15 concerned, 
without transmitting. You may make it a subtype notify [ a subtype ] this notice the 
case of a current a non-used frame, for example, an administrative frame, using 
frames, such as "0000" - "1001", among the administrative frame of the MAC frame 
specified to IEEE802.11, and the frame for control in the case of frames, such as 
"01 10" - "01 1 1 ", and the frame for control. 
[0151] 

The terminal WL15 which received this notice should just start the processing 
actuation after step S2 shown in drawing 20 . In step 84 mentioned above, a terminal 
WL1 2 transmits the ACK frame and the step which a terminal WL15 starts processing 
of step S2, and shows after that to drawing 20 may be performed. 
[0152] 

By the communication procedure concerning the operation gestalt of the above 5th, 
as shown in drawing 16 , when the terminal WL13 had already made wireless 
connection with a certain terminal WL14 and a connection request was carried out to 
a base station AP 1, the technique for securing the security of the minimum level 
beforehand set to BSS1 of a base station AP 1 was explained. As shown in drawing 22 , 
when the terminal WL15 has already made wireless connection with a certain terminal 
WL16 corresponding to this next, the case where this terminal WL15 carries out a 
connection request to a terminal WL12 is explained. 
[0153] 

Here, the security level which can support a terminal WL16 is "enc.0." Since BSS1 is 
joined, a terminal WL12 needs to secure the minimum security level beforehand set to 
BSS1, in case a terminal WL12 starts a communication link. For that purpose, what is 
necessary is just made to carry out the same processing actuation as what was 
shown in drawing 1 8 at a terminal WL12. 
[0154] 

Drawing 23 shows the procedure between the terminals WL12 and terminals WL15 in 



the case of carrying out a connection request from a terminal WL15 to a terminal 
WL12. In addition, in drawing 23 , the same sign is given to the same part as drawing 
1_8 , the explanation is omitted, and a different part is explained. That is, in drawing 23 , 
the processing actuation in the base station and terminal WL13 of drawing 18 is 
equivalent to the processing actuation in a terminal WL12 and a terminal WL15, 
respectively, and the same, same processing as the procedure substantially shown in 
drawing 18 is carried out. Therefore, if the base station and terminal WL13 under 
above-mentioned explanation in drawing 18 transpose to a terminal WL12 and a 
terminal WL15 about the explanation which refers to drawing 23 , respectively, it is not 
necessary to explain especially and you can understand. 
[0155] 

Moreover, in drawing 22 , also when it is going to transmit a direct data frame to a 
terminal WL12, without a terminal WL15 passing through authentication, a terminal 
WL12 may be made to carry out processing actuation as shown in drawing 23 , after 
carrying out processing actuation of the flow chart of drawing 21 . It is desirable to 
carry out processing actuation which the terminal WL12 was step S81 of drawing 21 
preferably, and progressed to step S84 immediately, notified the purport which 
requires authentication of the terminal WL1 5 concerned, and was surely shown in 
drawing 23 when the data frame addressed to the direct terminal WL12, without 
minding a base station was received from a terminal WL15, when securing security. 
The terminal WL15 since the security information of a terminal WL15 is registered into 
the security table of a terminal WL12 is because it does not necessarily communicate 
above the minimum security level of BSS1 to which a terminal WL12 belongs to the 
wireless connection with terminals other than terminal WL12. 
[0156]- 

in addition, the existence of the terminal which has already connected the terminal 
WL15 as well as the above when wireless connection is being made with two or more 
terminals or a base station, although the above-mentioned explanation explained the 
case where the terminal WL15 was making wireless connection only with one of the 
terminals WL16 to the example, or a base station — each of the security level is 
notified preferably. When two or more security level of the radio already connected 
from the terminal WL15 has been notified, a terminal WL12 should just check the 
security level about the each in step S76. 
[0157] 

As explained above, when the security level which one of them should protect at 
worst is a terminal in BSS defined beforehand also in the communication link between 
two or more terminals according to the operation gestalt of the above 6th, the 
security level concerned can be secured. 
[0158] 

(7th operation gestalt) 



above-mentioned the 1- the 6th operation gestalt explained the case where the 
security level of BSS was secured. In IBSS, the same technique can be applied, also 
when securing security level. 
[0159] 

This 7th operation gestalt explains taking the case of IBSS1 of a configuration as 

shown in drawing 24 . 

[0160] 

In drawing 24 , IBSS1 consists of plurality WL31-WL33, for example, three terminals. A 
terminal WL31 supports security level "enc.O" and "end", a terminal WL32 shall 
support security level "enc.O", "end", and "enc.2", and a terminal WL33 shall 
support security level "enc.O" and "end." 
[0161] 

IBSS can transmit [ according to the convention of IEEE802.1 1 ] and receive a direct 
data frame, without passing through the authentication process of authentication 
between the terminals of the plurality in IBSS without minding a base station. Each 
terminal in IBSS1 has a security table, the security information of each terminal which 
constitutes IBSS1 on this security table is registered, and if it is made to 
communicate above the minimum security level beforehand defined within IBSS1, 
between the terminals in IBSS1, that minimum security level is securable. 
[0162] 

Then, the processing actuation when having not joined one [ WL31 ] of two or more 
terminals which constitute IBSS1, for example, a terminal, at IBSS1, namely, receiving 
a connection request from the terminal WL34 which is not registered into a security 
table is explained. 
[0163]- 

This processing actuation as well as the 6th operation gestalt transmits the notice of 
the purport which requires authentication to a terminal WL34 the transmitting origin of 
the data frame concerned, when a terminal WL31 carries out processing actuation as 
showed preferably drawing 21 and the security information of the transmitting origin of 
the received data frame is not registered into an own security table. Then, 
transmission of the frame of authentication carries out processing actuation as shown 
in drawing 23 preferably from a terminal WL34. However, the terminal WL15 shown in 
drawing 23 should just be transposed to a terminal WL34. While a terminal WL34 writes 
the security level of a terminal WL34 in the frame of authentication, namely, 
above-mentioned **1 since — **2 ** — at least one is written in and it transmits to 
a terminal WL31. A terminal WL31 receives the frame of such authentication from a 
terminal WL34, and the same processing actuation as the terminal WL12 shown in 
drawing 23 should just be carried out. 
[0164] 

Thus, also in IBSS, the minimum security level beforehand set to the IBSS is 



securable. 
[0165] 

Moreover, also in the communication link between two or more terminals, when the 
security level which one of them should protect at worst is a terminal in IBSS defined 
beforehand, the security level concerned can be secured. 
[0166] 

the above the 1- as the 7th operation gestalt explained, the radio communication 
equipment which constitutes wireless LAN, such as a base station and a terminal, 
respectively By having at least one security level (preferably plurality), and having the 
description shown in following - (x1) (x8) For example, the radio which secured the 
minimum security level by the encryption beforehand defined for every basic group of 
wireless LAN, such as BSS and IBSS, i.e., a communication link group, is realizable. 
Moreover, in the communication link between two or more radio communication 
equipments, when it is a radio communication equipment in the security level which at 
least one of two or more of the radio communication equipments concerned should 
protect at worst and the communication link group by whom the security level of the 
minimum level is beforehand defined if it puts in another way, for example, BSS, and 
IBSS, the security level more than the above-mentioned minimum level can surely be 
secured. In addition, it is the function which should have a base station and a terminal 
in common preferably about the description which is not clearly written to be the case 
where it is especially a base station in the following (x1) - (x8). 
[0167] 

(x1) In case a connection request is carried out from self-equipment to the 1st radio 
communication equipment which is other radio communication equipments, notify the 
1st security level which is the security level used by the communication link between 
this 1st radio communication equipment among the security level which 
self-equipment has at least one to said 1st radio communication equipment. 
[0168] 

(x2) In case a connection request is carried out to said 1st radio communication 
equipment, when self-equipment has already connected with the 2nd radio 
communication equipment which is other radio communication equipments other than 
said 1st radio communication equipment, notify the 2nd security level which is the 
security level used by the communication link between this 2nd radio communication 
equipment. 
[0169] 

(x3) When said 1st radio communication equipment is a base station and the security 
level of the minimum level connectable with this 1st radio communication equipment is 
broadcast, choose the security level more than this minimum level among the security 
level which self-equipment has, and in case the connection request of it is carried out 
to said 1st radio communication equipment, notify. 



[0170] 

(x4) When said 1 st radio communication equipment is a base station and two or more 
security level connectable with this 1st radio communication equipment is broadcast, 
choose a match as either of two or more security level this broadcast among the 
security level which self-equipment has, and in case the connection request of the 
selected security level is carried out to said 1st radio communication equipment, 
notify. 
[0171] 

(x5) When self-equipment receives a connection request from the 4th radio 
communication equipment which is other radio communication equipments, The 3rd 
security level which is the security level used at least by the communication link 
between this 4th radio communication equipment and self-equipment which were 
notified from this 4th radio communication equipment is in the security level which 
self-equipment has. A — and when it is more than the minimum level beforehand set 
to the communication link group (namely, BSS and IBSS) to whom self-equipment 
belongs connection of this 4th radio communication equipment — granting a 
permission — (b) — at least when said 3rd security level does not fulfill this minimum 
level, 3rd means to refuse connection with this 4th radio communication equipment is 
provided. 
[0172] 

(x5') While the security level of the A above 3rd is more than the minimum level 
beforehand set to the communication link group to whom self-equipment belongs, said 
3rd means When said 4th radio communication equipment has already connected with 
the 5th radio communication equipment which is other radio communication 
equipments other than said 4th radio communication equipment When the 4th security 
level which is the security level used by the communication link between the 5th radio 
communication equipment concerned is said more than minimum level When 
permitting connection with this 4th radio communication equipment and not filling the 
security level of the (b) above 3rd more than said minimum level, Or when said 4th 
radio communication equipment has already connected with said 5th radio 
communication equipment, and said 4th security level is unknown, connection with 
said 4th radio communication equipment is refused [ when said 4th security level does 
not fulfill said minimum level, or ]. 
[0173] 

(x7) When self-equipment is a base station, provide 4th means to broadcast the 
security level of the minimum level beforehand set to the communication link group to 
whom self-equipment belongs, or two or more security level more than this minimum 
level. 
[0174] 

(x8) If there is a thing more than the minimum level beforehand set to the 



communication link group to whom self-equipment belongs to two or more of the 
security level when two or more security level has been notified from said 4th radio 
communication equipment, choose one of them and provide 5th means to notify it to 
said 4th radio communication equipment. 
[0175] 

The technique of this invention indicated in the gestalt of implementation of this 
invention can also be stored and distributed to record media, such as magnetic disks 
(a floppy disk, hard disk, etc.), optical disks (CD-ROM, DVD, etc.), and semiconductor 
memory, as a program which a computer can be made to execute. 
[0176] 

[Effect of the Invention] 

As explained above, according to this invention, radio which secured minimum security 
level by the encryption beforehand set into each group to every [ of wireless LAN ] 
basic group (communication link group), such as BSS and IBSS, can be performed. 
Moreover, when the security level (security level of the minimum level) which at least 
one of two or more radio communication equipments concerned should protect at 
worst is a wireless radio communication equipment in the communication link group 
(for example, BSS and IBSS) set beforehand in the communication link between two 
or more radio communication equipments, the security level more than the 
above-mentioned minimum level is surely **. 
****** — things are made. 



[Brief Description of the Drawings] 

[Drawing 1] It is the mimetic diagram showing roughly the communication system 
concerning the operation gestalt of this invention. 

[Drawing 2] It is the block diagram showing an example of the circuitry of the base 
station shown in drawing 1 . 

[Drawing 3] It is the block diagram showing an example of the circuitry of the wireless 
terminal shown in drawing 1 . 

[Drawing 4] It is the mimetic diagram showing the structure of the MAC frame 
specified to IEEE802.1 1 transmitted between the base stations and terminals in the 
communication system shown in drawing 1 . 

[Drawing 5] It is the table showing one example of the security table with which the 
base station or terminal in the communication system shown in drawing 1 is equipped. 
[Drawing 6] The base station or terminal in the communication system shown in 
drawing 1 is the table showing other examples of a security table. 
[Drawing 7] It is a flow chart for explaining an example of processing actuation of the 
base station in the communication system shown in drawing 1 , and a terminal. 



[Drawing 8] The mimetic diagram having shown the frame structure of the 
authentication specified to IEEE802.11 transmitted between the base stations and 
terminals in the communication system which shows (a) to drawing 1 , and (b) are the 
tables showing the contents described by the item of the frame shown in (a). 
[Drawing 9] (a) - (c) is the mimetic diagram having shown the structure of the 
association request frame specified to IEEE802.11 transmitted between the base 
stations and terminals in the communication system shown in drawing 1 , and an 
association response frame. 

[Drawing 10] It is the table showing the example of the updated security table with 
which the base station or terminal in the communication system shown in drawing 1 is 
equipped. 

[Drawing 1 1] It is the mimetic diagram showing the structure of the beacon frame 
specified to IEEE802.11 turned to a terminal from the base station in the 
communication system shown in drawing 1 . 

[Drawing 12] It is the flow chart which shows the processing procedure which the 
security level of the minimum level beforehand set to BSS to which a base station 
belongs to a terminal from the base station in the communication system shown in 
drawing 1 is notified, and carries out a connection request to a base station. 
[Drawing 13] It is the flow chart which shows the processing procedure by which 
security level is notified using the association response frame transmitted between 
the base stations and terminals in the communication system shown in drawing 1 , and 
this security level is checked. 

[Drawing 14] (a) - (c) is the mimetic diagram having shown the structure of the rear 
sociation request frame specified to IEEE802.1 1 transmitted between the base 
stations and terminals in the communication system shown in drawing 1 , and a rear 
sociation response frame. 

[Drawing 15] It is the flow chart which shows the processing procedure by which 
security level is notified using the rear sociation response frame transmitted between 
the base stations and terminals in the communication system shown in drawing 1 , and 
this security level is checked. 

[Drawing 16] It is the block diagram showing roughly the communication system 
concerning other operation gestalten of this invention. 

[Drawing 17] In the communication system shown in drawing 16, it is a flow chart for 
explaining an example of the processing procedure of the side which emitted the 
connection request at the time of the radio communication equipment connected to 
other radio communication equipments carrying out a connection request to the radio 
communication equipment of further others. 

[Drawing 18] In the communication system shown in drawing 16, it is a flow chart for 
explaining an example of the processing procedure of the side which emitted the 
connection request at the time of the radio communication equipment connected to 



other radio communication equipments carrying out a connection request to the radio 
communication equipment of further others. 

[Drawing 19] It is the block diagram showing roughly the communication system 
concerning the operation gestalt of further others of this invention. 
[Drawing 20] It is a flow chart for explaining the procedure for making wireless 
connection between the terminals in the communication system shown in drawing 19. 
[Drawing 21] It is a flow chart for explaining an example of processing actuation with 
the terminal at the time of making wireless connection between the terminals in the 
communication system shown in drawing 1 9. 

[Drawing 22] It is the block diagram showing roughly the communication system 
concerning the operation gestalt of further others of this invention. 
[Drawing 23] It is a flow chart for explaining other examples of processing actuation 
with the terminal for making wireless connection between the terminals in the 
communication system shown in drawing 22. 

[Drawing 24] It is the block diagram showing roughly the communication system 
concerning the operation gestalt of further others of this invention. 
[Description of Notations] 

AP1, AP2 — Base station (base transceiver station equipment) 
WL11-WL16, WL31-WL34 — Terminal (wireless terminal unit) 

1 1 — Receiver 

1 2 — Transmitter 

1 3 — Reception-control section 

14 — Transmission-control section 
20,100 — Antenna 

21 ,1 1 Q-— Security table 
101 — Receive section 

107 — Transmitting section 

108 — Information processing section 
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A^rtufa^ i (Dmmmm&micmm u tutBiff i omm 

ilfl^Btf Suf B^f t:/ ^ ^ - * i > T Bg^ffc-r- 2 
[if^si 5] 

KStife^ 1 (D7^-;l/K*SU iiuIB7 U— A#££g|5 

£T#fufBS*P-tr*a. yf>f ?> fcffittnfcfJgMS? 

IBS*** a. 'Jf^ U^l/cfc D tfi< 4»ntf»«»pl 

*»jrr*c 1 3©ftt*Hfi$/x 

tA 0 

CBW&S 1 6] 
[tt*«i 7] 

£ ilfl L T ^ & SB 3 <offlmmmt*E\c mMt 2>zt 

t-rz gft&a e oittit > x f a q 
x ^ u^^TtrjiB^ 2 oitiuifittB i: mm Iti^S 

3 OMHBI A«KS(c S«-r £ c 4: * W« *T § gf^ 

>T > h ffl -T £ c fc flt t * % W# m 6 offlMSMI 
[g§^2 0] 

Ao 

wna* 2 aff* 3 nimmmmmv 1 o« % mmhi^ic 



(3) mm 2004-32664 

ffl^-r « c t -r 3 6 omwia^xt' 

A c 

2] 

itutBiifcO-t?^ y x^r U'WPhWBS 2 O^HUfifl^B 
tuIB^ffie^;l/-7 p tcS'raS4to^iifIgBT^ 

m 6 ^O^SilfS vXtAo 

iSiiff^s^jiaLTtijfB^ i <DmMy]s—2*(omm* 
c t t ? zm&m 6 omkmbs/xt- 

20 C8g*S 2 4 ] 

-2»*«4t4S 2 07 1/- 

ccom 1 ^}Mfi^ U-A^rlg 1 O^^iSfg^StCfSittT 

*micmm? zct tt&m trz tnxm e ^ 

^^"T^^ l (ommy U- Airlift ^Iz-^^SSM 
[0 0 0 1] 
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5 

bfr$m&itizm»mmi' Meter 

So 

[0 0 0 2] 

MtMLANtLT. IEEE 8 0 2. 1 1 (IEEE8 

0 2. 1 1 S^X-rAte, IEEE 8 0 2. lla^Xf 
A&tfl E E E 8 0 2. 1 1 b^XrAHS^tytOi: 
tSo ) ICI'J< jRtt L A N ">Xf AtflWttiK 1 7? 

aentt^o coiiSLAN^xfAm et^tT? 

t^WE P (Wired Equivalent Pr 

1 v a c y) £:l^7?S#SfflSftT^So ffiot, I 
EE E 8 0 2. 1 H:I^<iSLAN^4-aUf>f 

WE PffifflSnSWE Pt- HRffWE 

[0 0 0 3] 

I E E E 8 0 2. 1 1 «ofti»LANO!Kfa 
tC^T^ WE PfcV^Bg^fbTS^iBfflSn^WE 

p ^e— K&tfSjssti&i^w e p Kofan^To 

miStfnimT'&K). WEPtflffl^nSWEPt 
- Rcfc^Ttt, Bfft©l/^;l/tfa3S:5 6 4 If *y b& 
Zf 1 2 8 If v hOffir^fbfc— K^fc o , i^-f n*^«» 
L A N^fettS*ilfll«(/^i»«jKy >*tca««tiT 

[0 0 0 4] 

I E E E 8 0 2. 11 tC«eofeJlRttL ANO- J&mtL 
n^BSS (Basic Service Set) 

^5«j«#ffi^a6 0, Mob s s^i^nt^7 h 

[0 0 0 5] 

COB s sn*»«-r*«jfiWftH*tt, DS (D i s 

tribution System) 8 tlt^ 

3 G SSWg, EP^. Mi. coDStcjg 

U flWBtt, T**X#'f> h*ALT 
BSStDS£<D?A*&M2tlZo fif^T. fiS*(i. T 

[0 0 0 6] 

«8*«\ BSSCSL, SflSJa*^LTflSOB S SUlJB 

TY^va ^(authentication) &tf 
rVS/x-S/g ^(association) ¥^7b s 



(4) ^2 0 0 4-3 2 6 6 4 

SM^LST £%IZ& V T Vi/JL—is 3 > (r e a s s o 
c i a t ion) ^ffiZtmftZtlZo 
[0 0 0 7] 

I E E E 8 0 2 . 1 1 lC7£l£ %>mm LAN 
^^--AOffljSHfcLT. T^-tX^iJtaicO^O^ffl^ 

A (control frame) ^ If— 
JiC#£T3gfIffl:7U-A (management 
f r a me) t, &mmm<0"r— $7 U— A (d a 
t a f r ame) £tf&%> 0 C C T\ sj-— b >-r ^ ^ 

[0 0 0 8] 
[0 0 0 9] 

I E E E 8 0 2. 1 1 tC^^^^L ANTfi, iffi*** 

v^to*a 0 gp-s, t-tvf^->3ygs (au 

20 thentication request) tC4ol/ A 
T> *8*#ISiflBK:WE P^ffflt5Ci:*S*U c 

>37 U-A03M§tcS-3VTW E P <fc 9 tc 

[0 0 10] 

I E E E 8 0 2. 11 tC^*^^*gL ANOffiOJgffii: 

50 D , C IBSS (Independent Bas 
ic Service Set) £fftLTl^£ 0 I B S 

st&, r^-bx#^:y m*. itsnf, ibss 
* 0 ibs sm 7v*>x->3 viast*. m 

co I BSSTti, WefeW?*— bv-r-f^-v- 
[0 0 1 1 ] 

40 C^Wfteitt 1] ISO/IEC 8 8 02- 1 1 : 1 
9 9 9 (E) ANSI/IEEE Std 8 0 2. 
IK 1999 edition 
[0 0 12] 

i&wmm L£vt?z ran 

LTBg^fLSStg (WEP«M6) */H^SMSjW* % 
50 *a»fc»ftJB«IT«4, aBK*»c*ofcWEP««0 
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7 

[0 0 13] 
[0 0 14] 

[0 0 15] 20 

ssic i b s sTttx-^^u— Asaift-raiBtc* 

[0 0 16] 

•Jr^ U^;l/*SHST 3 c £ i: |n)«Hc«»<D 

b s sHTaa-rsDsaatcftv^Tt, sbssic^ 

[0 0 1 7]~ 
[0018] 

**y«fc. 
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[0 0 19] 

**r-r 1 (ommy u- a*mib3s 2 oftUKWtttB 

IB 1 O^yffii:. 

jfttBiffifcl-tr^a y-r-r U^;l/^mjtBS^-fe*a y -r-f U 
^ fc i±$5 L T&ijgBS 2 OKtKUIliB 4: 0»«ffiS* 

c<Dm2 comm7 v-K*mmm 2 o^aflranicfi 

[0 0 2 0] 

k L TffiSaiHWBie 50b- ^<0*»iffl«ttH 
lB5*t ^tt*«WFPl«<ia«S IB 2©7-f-;l/ F^^r 

■raiB2<oas{i7u»-A*«*L, at>* 

[0 0 2 1 ] 
[0 0 2 2] 



9 

W9ft03SlSOfi^fe0^6Wu, enc. 0, e 
nc. K enc. 2 , • enc. (n — 1 ) tO<t -5 

^■Jr^ l^OWcte, l oo«SOBg#{fc#iW*f 
[0 0 2 3] 

3KtT<0 I E E E 8 0 2. 11 tCjS^^nfc^JS L 

^7l/&, Hg^k^L, IP "6, WE P (Wired Eq 
uivalent Privacy) ;fc*jgjE£tl£:^ U 

[0 0 2 4] 

SROIEEE 8 0 2. 1 l^«o/:iaL AN 

WE P#Hffl*tl*«^lC*oTfc, 
WE P£6 4 tf*y hlfiWi 1 2 8 fcfy hTMt^i:^ 30 

ttOMTtt, ffi»-b*aUx-<U^;l/fcUT, Sit?© I 
EE 8 0 2. 1 1 KSffilCftSilKBL ANiB«lC, 
( 1 ) " WEP^l" > (2) w WEP6t)T*64lf7 
h^WEP^Jffl" , (3) " WE P$5T' 12 8^7 
h<DWE P«rf(lflT ©3^l/^;l/tffc«J|&4«kL 

(3) " WEPfeOT'l 28tf7h <DW E P *fijffl" T 
feS, CtUC^^T* (4) " WE 4 tf *y h<£> 

WEP«W" ©-fe+ay-r* tfig <^:oTl^o BP 40 
^ "enc. 0" # (1) " WE P&L" tcfg^ 
U" enc. 1" (2) " WE Pgt)T*6 4 tf \y h 
OWE P*fiJffl M te«3U " enc. 2" # (3) " 
WEPSDT'l 2 8 If y h<OW E P£rfiJffl" lcm^~?2> 

[0 0 2 5] 

JWTOSMHlCfcl^TW:. WE P t^o 1 OOUgjCDBg^f 

ft*ao*o»'&*coi/>rKw , r*o l**u wepix 



t¥P*lj 2004-32664 

So 

[0 0 2 6] 

ttTOCORWO^S'Ptt, I E E 8 0 

2. 1 llcmfetEtltcfBML AN^X-rAlCilfllLTyjl 

I E E 8 0 2. 11 lC«£Sftfc*ft«L A NS'Xr-A* 
[0 0 2 7] 

LT> aaoiH*. W*tf, (WL 1 l-W 

L 1 2) Rt/COiSm (WL 1 1— WL 1 2) tf&Mg 
RSnSliiAPlAMoOBSS (^— ~>*y ^ If— 
tTX-tr^h) *i*t5IIi/XfASHWt«« 
[0 0 2 8] 

0111 Si OB S S (WT, ffi#tCB S S 1 fcPf-S) 
^jSWtc^Lfcfe^TfeSo B S S 1 «\ Z*-bX# 

-r>h^urosife^A p i ^tfsttt^A p i icmmz 

aXT. WL 1 K WL 1 2^6*S 0 

[0 0 2 9] 

fSi. m l UiM SlOBSSl £S2:M&3^2 0B S S 
(J^T. ffiMlCB S S 2 fcnf-SC) tC^-T^Stte^A P 2 
4:. B S S 1 MB S S 2 lCt)iaAltt^j:l«WL 
1 3LtnLT1^ 0 
[0 0 3 0] 

^"(enc_l ow) ^IS^^tlTV^o CO^S&Jgffi 

tc«*jw*ii«s/x^ b s s i -ews-rsafi 

0-b4^ 'Jr-r K/l/ (e n c_ 1 o w) H\ -b^r-a. U 
■r^ U'S;!/* enc. 1 " t Lt^i> 0 HI 1 lc 

It. rr^f SSfgO-b^a. Uf ^ (enc_l o 

w) ^-t^a'Jf^ U^l/" enc. 1" T£>£g£re 
nc_low=enc. 1 fcittt^o S±teA P 1 
T*d "enc. l" fci/^-b^-i 'Jf^ U^Wtttttc 
fe, t+a'Jf>f W enc. 1" 
iSl>-b^a. iJr-f l"W enc. 2" ^t^-hl 
TV>5t><Dfc-rSo fcT, B S S 1 T«fflBTIB*«* 
O-b^a. »J-r>C U^Jl (e n c_h i g h) W\ "en 
c. 2" h&3 0 HlTtt. «*Ot*a'Jf-<l/^l/ 

(enc h i gh) enc. 2" e^re n 

c_h i g h = e n c . 2 ^SlTl^o ffltifi^A P 1 
4:, colWA P l ic»ttsn*ffl*a^tt*ft»4: 
II "enc. 1 M W±0-b*i 'Jf^ U^/I/Tiid^ 

snscfcWfeifflSA p i ic»s?nTt>So raw 

tc, cogtfc^A P i *4ifiLTfB<0ttlB»i:a«-r*Jft 
OK«*«t^U:»fl6JBfcomt±, "enc. 1 " UL±<D* 



// 

**Vf-J U^;l/T*iiff 2 ft* C fcft^A&giffiS A P 
1 tc&5££ftT^5 0 
[00 31] 

—13. «WL1 l©St8t*aUf^U^;Kt, " 
e n c. 0" t" e n c. 1\ ffi*WL 1 2©fit5 

Wa'Jf^l/^;Ki x " enc. 0" t n enc. 
1" fc" e n c. 2" T'*5fe"f5o 
[0 0 3 2] 

H2tt, B 1 t^SnftliS A P 1 ©§B«S07d 
P l i:»ft«AP2*KgiJ-rs*eBO*i^i:#. 3c ^ 

[0 0 3 3] 

oT§lM§^M?ti§o 3S«8P1 2?\ T>t+2 

o%ftLrw^mm+^%mmm^tf&&t<n. eft 

e>03MfSff^fiT>^^2 0tcftt*&^ft* o 
[0 0 3 4] 

S<i»l l*6oa««^«4, Si»J»fl!l 3tcA*f£ 
ft> #J*i£. I E E E 8 0 2. 11 v^XfA («T<0|# 
Wfcfc^T. IEEE 8 0 2. 1 1 i/XfA(t I EE 
E 8 0 2. 1 la^XfL, IEEE802. 1 1 
X'rL.RU^Ikmm'StlZ I E E E 8 0 2. ll ^>Xr 

*^S52ft5o coSMfMSSffil SJfiS*^* 

*{fc«ra**frU SMt«9tt, «-&ft (decryp 
t) «ftT«^ffc-r-*Kg»Sft* 0 CflMB^ffcr*- 

ao»w*sft*o 

[0 0 3 5] 

x ht?ase , r*fc»0'r-**4«'ra*o, ieee 
8 0 2. i i K«pftbftHfs&©i3Sffl*aa3S:if*sijii'r 
*o c cogs %mu 1 wsjb*^*— h-r&is 

^\j£{i£ft£ 0 ft, i2l:f^n§t^a'Jf>ff* 
>Ol/2 1 fcoi^Ttt. ■»tKBB'T* 0 
[0 0 3 6] 

H3tt, 01 £^StlfciB*WL IK WL12, WL 

So ft, WTOlttW^fel^r, 4StRWL IK WL1 
2, WL1 3&££E80T£^gcD&^ktte. 



(7) ^2 0 0 4-3 2 6 6 4 

/2 

[0 0 3 7] 

«S5fcWUi. TVrtlOO, 7yftl0 0^LT 
S(ifI^«rSfl-r*SfIS|5 10K 5(1^5 1 0 1 

•rssfisijffljgp i o 5, 1 o o^/rLTigfifi 

^suB-rsasssB 107. co^ftgp 1 0 1 *m»t 

S^fittinpffil 0 6, igfiSftSx-^^/SU 
tt, Sflt/c-r-^JttHTS, mZlis BjRL*^«iK 
«lc«*S****«igfflS 1 0 85tft^Uf^f- 

[0 0 3 8] 

tB««aa» 10814, coti^jfflfisp 1 0 8 icmmzn 

rz€;m*v 1 0 9**6-r-*«SW\ sE^li. 

^-IfO^mcJ; ^^dJSftfcT*— #*»*c2S«-r-^ 

3&^-1f«c«t:oTii^«ftTaS«B**^-r*i:, CO 

Aran 07m c zmmvTt&zn tc 7* 

Jis* JIt— 9 \C £ ft. IP/^-yh^I 
20 EEE 8 0 2. 1 lTSStSMAC7U-A (med 
ium access control frame) 

tfBfSHttft. 2. 4GHz(D«a®flcS^ 

[0 0 3 9] 

— T>f-^1 0 O^SfiSftfcgfifl^ftt. §{Igf$ 
1 0 1 "C^V S^jI/t*— # IT^M AC7 U— Ak:^ 

Wx-^^jfttti^ftTtssfflaispi 0 8tciH6ftSo c 

^S^Offia^T^o ft> t*ffiA98Rl 0 8li, ±fg 

t^-a yf^T-7/i/ 1 i oicov^Tii, mem 

[0 0 4 0] 

I E E E 8 0 2. 1 1 t^nn^MAC7l/-L 

3 0/W hMAC^7^- ^2 3 1 2/^ hCOf" 

¥0 LTf r --^^IEL<^^ftfcCO^^p^Sfc^C0^lx— 
A • ^x-y • y>X (FCS) 7^-;bKT'M 
2ftT^S 0 MA C^y^- tCfiK MAC7U- A£:frJ 
»f S'ff fBfcVSSteftTi/^ 7 U- An > ha—juy^ 

^«H$B0 (duration) Sl^W: I E E E 8 0 2. 

i nc^^7V'>x-^ 3 yi Di:MP»n5«^ 

I D^I2a!^ftTl^S Durat ion/IDf iel 
d^^ftT^So B S S#»&»AP*lK*.T^ft 
tf, C £OB S SO I DtbT, S%^A P COM AC 7* H 
50 UX^ffias^ftSo MAC^7^-lC(t 7HU 
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13 

*>x^>ha-)i7*-jiVtfmm.ZtiT^z> 0 ir- 
* 7 u— Atf&3 r * -b x *>r > f *^ (tor * x * 

cfc5K9JS^T5ftT^*o EP-S, 

IfiS/XfArtO*»«4«Jfe (De s t i 
nation Address) <DM A C T F UX^fE 

tCfcttSigfljc (Source Address) 
ACTFUXtfEi^ft, 7KUX3^7><^Ft: 70 
W\ SKMAC7U-i ak «ita5aSsaifi^(OMACT'K 

ux^gsassn, 7 Fux4<o:7>r— ^Fia*. m$i£m 

A C "7 U-A«riaS2SSiSfl7C(DM AC7K UX**8E» 
SftT^So 
[0 0 4 1] 

MAC7l/-A^7l/-i,n>hD- 7 p nhn 

7 Ftf IStt 5 *u C fttc^T £ 7 P '7 -7b K 
S:D : +f> r ^^7 ,, 7^-;l/K^^e)nTl/>^ 0 MAC7 
U-AtCii, 9l<D 3 ^><D& £<D#*7tf7 20 

F) Kf2i£&£ftT^-£>o Sfc* *:<OZ<<-f<DWZ>(7 

£ft£o BP*>, ^^^LT (1) Blffl7U-A, 
(2) T^-feXSiJttlOS&OSfJffllffl^U-A. (3) 
^iHlfflco-r— ^71/- Atf&£ 0 (1) ilffl7U» 
AtC&, ^y^Y^^LTtf-r3> (Beacon) , 
b>TW^-— ->3 > (Au t hen t i cat i o 
n) ^7b-A, 7VyX-S/3 y (A s s o c i a t 
ion) (D7b-A, 7V> / X-v'3> , J^xxh7l/ 30 

(2) mmmyiy-i^icit, ^^^^y^itACK 

(Acknowledgment). RTS (Retu 
rn To Send), CTS (Clear To 
Send) fO«fc9S«8ffl71/-A^6S 0 V?** 
77 << -71/ F (4^7h) »ctt, ±IH^J:5ft1«Saa 
^MAC7b-A*W7^^7A^^^ii^?n 

[0 0 4 2] 

7 b— Any ha- 7l4cte, To DS7^c- 71/ F 40 
(1 fcT*y h) MF r om DS7^-;l/H (1 fcfy 

F) ^t$nr^s 0 cneii, mac7u-a^t- 

«^01S07U-A, *— try^Y^r-v-3 
>\ 7V5/X-y 3 >CD7 b-ATd 

T0J tfSS&SftT^T^JfflSftfcl/N, MAC7U- 
A^f-^7U-A^§^, f'-ifOft^WBL 
AN, 7^t7^yh^HiDStfenif, lOkT-y 
h^CtOTo D S 7^-71/ F fc: 125$ 2 ft, -r- 
^O^fljctfWISL AN, 7^-bX^V FUcl^iD S 50 
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T*$>tll£ 1 ^ti7 FtfCOF r om D S7^f- 7l/FtC 
iE2S;£ftSo 7b-Any Fn-7l/lc&, 'Jf-77^ 
— 71/ F (reserved field), WEP7Y 
— 71/ F\ 7 4— ;l/K (order f i e 1 

d) ^J: 3 ^ffi7 ^ K^Iicffll^ntt^o xl- 
if*C «fc o TIIHB**^*^*^^**^^^ y f-77 << - 
7UFtc§#&^t-£C£#Tt3 0 ^tc^SftSJ: 

<5lC, 7U-l±<D2^7RXSV-7$^7m^7U-<L 
0^^yM^7^^7 P Ol^tl^lCltoT8^C>7 

7l/#^#> 6 ft, C O y tf— 7 7 ^ — 71/ F \c u 

^wisasnao c o y *r—77 * -iv voymmt u 

2ft£o 

[0 0 4 3] 

stfa i *#aabTB s s i tcov^T^-r^o 

[0 0 4 4] 

SI 1 tC^£ft£ B S S 1 Tte, C<DE S S 1 ic^bbfebb 

z>nrcmis.m<D't*zL yf--< i^oi (ccm "en 
c. i" ) T+mmtfnnzftzcttf^&iz&ztiz^ 

£o EP*>, BSSl*«fiKt51%®APli:«*WL 
1 1-WL1 2(D**£l*. Wa'Jr-f U^7l/" e n 
c. 1", Siti^AP I****— FLTi^5-b 

*a y f" << U-^<DlBBrtT\ " e n c . 1 " W±0-b 

[0 0 4 5] 

IMAP 1 ROmWL 1 1 — WL 1 2©*4?*Cf±, 
fS1SSP«rti>L> ccDie^aJtcti, -tr^n yf^T-7;l/ 
^S^e>ftTt>§o St^APlOt+aUf^f-7 
7l^tCt±, -Slfi^A P 1 IW*-htSir*aUf^ 

fz, ML 1 1 — WL 1 2 hLTl^S 

^bte<eW4DHBT*oT, Hg^g, tfv^i, Bg^Si^ 

^•rsfc*oi/-K i isfB*if (cco^-p^Bi^t • m 

l^o Sft. 4ia*WL 1 1-WL1 2£0^^? fe, 

b s s i w-hts-t^a'jf^ u^ii^pcomi&u 
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[0 0 4 6] 

>vz i tea, ^i^s^g a p i os-r* b s s i tcfe^ 

T^-htS^a»Jf><L/^ B S S 1 (Clt§ 
£T<Di8*WL 1 1 — WL 1 2 0StS-tr^a'Jr^ V 

a p i <ojs*r& b s s i tc43tts«ffiu^;i/<o-b*zL »j 
oiffiftct^tcssg^nTi/^o asm t^uf>f 
roj W3wai*hTv>*o 

[0 0 4 7] 

I E E E 8 0 2 . 11 -em&itlT^&t&tem (key 
1 , k e y 2 ) RZf I V (I n i t i a 1 i z a t i o 
n Vector) mtf1&&Ztl&o $6. WTOKflBfc 

[0 0 4 8] 

B 6 tt, B S S 1 rtlcfcttSiffipfcW LI 1-WL12© 
-tr4^ »Jr^f-7;b l l 0<OISflS«:SLrt^o 

tt, B s S l fi<DS«*S:tfSiSAP l ©WtS-bt 
a U-r-rttW^-ffeBRStiT^So S*iiJ/gA P l left 

(omt&mA p~i ioit^ b s s i *c^«>K^?nfc«fg 

[0 0 4 9] 

Sfc* ^ 5 6 ICtt, L/-;^a'Jr^ ^-^/Wcf* 

b s s i msftenfeiti/^wiot, 

-rW*Btcot^T«, B s S l rttc^5V>r, H^Oiiflco 
I'Jr^M Sci-fi, ffi5frci§:»y >*Stt5*§^c 

[0 0 5 0] 
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b s s i omis»sw:RSsn«o nmBbettfcu, 

0J*.Jf, 0 5 & 6 K^LfrfgxtO-r— HffiB 
ffitlTlS^n, coiIM±lc, ^^JS^rX^j-r^ 

*5^Tli, A P K WL 1 . WL2(t ^^Slffi^A P 
K iS*WL 1, WL2«MAC7Kl/X-el$£Sn 

[00 51] 

t\ L*>U 7^tX^>hAPlM«WLK 

k wl zicm-tztt^VT^mmttmrnL. &*<o 

■fe^-i VTj9—7jUcW%&fr, *<T>Vk. BSSltf 
7^X^yfAPlMS*WLK WL 2 tcj; o 
20 TlSjx^n. B S S 1 foX*<Dm{&<D**3. *Jt<< Is^lls 

[0 0 5 2] 

H 1 (C^L/cB S S 1 TCi, COB S S 1 icfcfL^a&E 
S?nft*fiBO-b*a 'jr>r U^;l/ M enc. 1" it 
±SHr*:i Urv U^/MCT, gifc^A P 1 RtttB-fcW 

LI 1 -WL 1 2MTii«^HfT?n-5o 

[0 0 5 3] 

#:&C> [U 1 IC^L/cB S S 1 £D1«A PKC, COB 
S S 1 KftnALT^*^flB5fcWL 1 3^S3Bg^Ttl5ig^ 

[0 0 5 4] 

4S*WL 1 3ti, S%^A P 1 ^6iMflSnS IEEE 
8 0 2. 1 1 icmfeZtlTl^V-ay (B e a c o 
n) yU-A^fliT^o IEEE 8 0 2. 1 lOSS 

—£>T^ / r—z/3 >(authenticatio 
n) M7V^X—>3 >(association) 

40 l*7VZ/3L—i/3><D&(DyU—l±tplC, Sift/gAP 1 
tCjlffl-r^tflShLTiS^WL 1 3<D-tr4^ Ut^ U-^ 

[0 0 5 5] 

A«*WL 1 3(D^2 'Jr-r U^I/*S«!lA P 1 

T, 5S*WL1 3©ttS-t^a'Jr^ U^/l/fcT en 
c 0" ^ enc. 1" T'fiSkfiSfSo 
[0 0 5 6] 

50 H8 (a) tt, IEEE 8 0 2. 1 llca£$nTt^ 
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77 

m4 tciSSftSM A C7U— Afc LTO*— fev^^r 
7 h^SLTt^o feV-r-r^r — *>3>71/- Ate 

^>i/XfAT(i:> BI8 (b) ic^Ti a fe><r 
^->3yOS*7b-A^UATSN (Auth 
ent icat ion Transact ion. Se 
quence Number) =1 lkTJ= 2 CQ7 A 
^fflSSnTl^o ATSN-IO*-- tr>f-<^— > 
3><7)7U— Ate, fiSSWL)()>5SlfigAP H<liJJ6 
n, ^OXt 1 — #X:3 — 71/ K (Status 

Code f i e 1 d) tt, U *f— 74:£tl*o ATS 

a p i a^&is^wLicassn, ^xt-^x^-k 

(Status Code) Xf-^Xi: LTS 

r^^r->'3y7^UXA#§0T^tl^^-7 P 
VyXfATIi, t-t>f^y-> / 3y^7l/-A 

t\> KaWf^ffc*— >XT-ATtt. ^-Hr^x-r^— 
3 >OlS7 2* (authentication 
request) £ LTA T SN (Authent ic 
ation Transaction Sequenc 
e Number) =1~4OT AtfffljftStlT^ 
£o ATSlf=lStfATSN=30Jj--b>f>f^- 

*u *©xf- *X3-Ktt, Uif-T'^^n^o at 

S N = 2MA T S N = 4 0;t—-t: >t- ^ ^— :> 3 >C0 
*tt»AP l**&«*WLfciiSS*U ^ 

TJi, AT SN = 2Zitf30*— tr>"r>T^--^3>^ 

n> A T S N = 30*-tyf^-*>3 VCD7U-A 
ItdfffcShT^So CtltC^tUT, ATSN=lSy 

[0 0 5 7] 

AT S N= 1 TW^SnS*— feVx-f >5r-: /h>07 

u-Ati, »«tB**»-rs«i^&anssn*o cos 
uif— rfc«na»aE*ffifflTJ&*o for, ctDxf- 

Uff W enc. 1" get H±" enc. 2 " 



(10) ^2 0 0 4-3 2 6 6 4 

^i&trcfc^Tftfto WToH«»»oKfl^i, s t 
atuscode field tc, »ffifi$«:&rstt 
eO-fe+j. U-r-r enc. 1 " §Scl^(£" enc. 

2" *'«#iiSnTV^5fe©fc , r*o C<£>ATSN=1 
^-t>f'<^^3^7l/-A[:H i£j*WL 1 
3CDilifg^ 1 0 7T*S«SA P 1 fcOiiMTfUfflLfcl^ 
-Mr a. Utw U^7l/ CffJiLtf, "enc. 1" ) 

OATSN = 1 O*— b>-r-f-!r — 5/3 >07U-A^ 
70 870Xfy7 p S 2 Ki^Vr*?^ Siifi^A P 1 JCiMff 

M A C 7 U— A >-rn^ <D ! J f-77 >< —71/ Ktcffi 

[0 0 5 8] 

AT S N= 1 O*— -tV-TV^— 5/3>07l/- 2*4:$ 
MLfcgi&^A P 1 OitHifffcO^TRWtSo SElc 

tf-nv^U-A^X-r^ys 1 tc^-Tcfc^tciS^WL 

20 3 <Dj£{§fffiJffl]gP 1 0 6 fcj\ ATSN=lW-b>f^f 
^■-'>3>7b-^fflll, -Mray-r-f 7VH 
1 0«r#8aLT*O7U-A(Dm«ffiRfT, WAtf. 71/ 
— 2»#«r*r ^Xr-^X3- Klc-fe+a. y*r^f 
71/ " enc. 1 " enc. 2" £r##3£fr 0 -fe 

^aUf>f tlfc*— ■ fe >-r Y 5/ 3 

>7U-2vte, «WL 1 3<OSSfiWJWSPl 0 6tc£o 

rstaiLfetr— 3>7u— AfcWjs-raaJttJSA p 1* 

3MO^fei:LTZKlxX2tc^LT, Xf^y^S 2 
*T£5tcS^A P 1 tC^fS^n^o SJ&J3A P 1 14, 
30 fe>f^y->3 V71— 2>£:§{1U 1WAP 
ltoS«WJ»Wl 3tt, gfiLftAT S N= 1 <Q*— tr 
>-r-<y— ->3 V71/- AcO0t^@rIt, #>J;il£, 71^— 

WL 1 SO-b^a'jf'fl/^" enc. 1" «£W4" 
enc. 2" ^r^Othb, Sttfi^A P 1 CD-tr^^ 'J-x^ 
^r-7Vl/2 1 tCgKSnTl^SB S S 1 ©llffiU^7l/<D 
^aUf>T 1^71/' enc_l o w" ttt%ZT£o X 

f7^s 3^t-£?tcffi*wL i 3frt>mK}znrcc 

<DiS*WL 1 30^i Ur^ enc. 1 " 

40 Itf enc. 2 M tf, S«SAP1W#-MT^ 
£>-tr^a «J -f-f U^7l/" enc. 1 " SfrHi" enc. 
2" T$>0> L^fe, B S S 1 Wlci3fr*5S{6U^/l/<D 
-tJrzLVr-J U^7l/" e n c_ 1 o w" &±<Dt ZiC 

is^wL i 3©«jHE«rtt : Rr'rsfc*ij»f^r*o 

L 1 3CD-tr^j. 'Jf^ U-<7l/^\ ««!!J3A P 1 

ffiAPl tf-y-tf— hbTi^-tr^iy*r-< U^7l/Tfe 
^>^\ B S S 1 tcfc^S«<SU^;l/ M e n c_l ow" 
OHr^^y^^U^TlcjMOfcSttfllll^WL l 3<Dg^l 
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[0 0 5 9] 

Xy-yys 3(C*5^T, 1«AP 1«*WL 1 3<D 
»Sc*J§Sf IEEE 8 0 2. 1 1 icffifelc 

m\ A T S N = 2 >f y-i/ 3 >7 U-i* 

*y7S 4 td^-f £ 9 (Cffi^fcYV L 1 3 tc A T S N — 2 
— tr>"r^^— >a >7U- A^igff ^n^ 0 KWL 

u-A©a«^NiHiB^**ij»f , r*o ^^nih](± n as* 

+i'Jf-rU^;l/oa (=N{@) MBiiti^o =3 
#L Sttl A P 1 h LT^S-b+i f >f 

;Wa^l/^;l/tLTB3tcWL l 3(4, c<D{£^U^;l/ 

*-4Hr*i U-f-r l^;b*±W\ Xf77S 2 (CtjVTJ: 
3U:±tf6nfcHr*aU-r-r^;I/^aa*n*o 

3 ^NIhUcHoT A T SN=2 ^-t>f^^- 
S/3>7l/-i*«*WL 1 3^§{rr3if£icii, fi 

[0 0 6 0] 

— 2u «3fcWL i 3©aw*lWi-sidii, Stte^A 

P 1*4. KWL 1 3 3b^ia^nfet+aUf^L/^ 
>l>t£tt&+&m^/*9* — **tilittNL 1 3d:ftt^ 
<> Xf7^S 6*C^*r«fc-5tC I E E E 8 0 2. 1 1 C 
«£lu{EV\ 'ft>l/>v>T^Xh^it^AT SN 

feVx-f^r— ->3 >7U-AOXf- £X3 — K 
(C, A T S N = 1 ©*-b>f^ > 3 >7 U^AO 

(C^?-«fc3*Cfig5fcWL 1 3(cjge*-£ 0 
[0 0 6 1] 

»WL 1 3 m A T S N — 2 — tr y^r <4 *T — is 

3>7u-i±*g;m?z>£, mmmA p 1 m*wl i 

e n c. 1" ^^n§o Sfc. «WL 1 

3(4, -fe+iyf-f u^/i'icttJS-r***^*— *fc 

T, IE EE 8 0 2. 1 10jSSI:{£t\ f-vUV^f 
^Xh^:i:^7U-^fV^ X~r «y 7°S 7 tc^; 
T^tC^WL 1 3<£>^TT3WE P«MB*:ffl^TBS*i 
ftf * 0 MtC, sffi^W L13(t A T S N = 3 (0*— fe 

(c A T S N = 20t— t>f>c^-y3 >7 Afr 



(11) «MJfl2 0 0 4-3 2 6 6 4 

(4, 7 U-A^B^ftLTX^y^S 8tC^fJ:-9^S 
WAP1 (CiMffT^o 
[0 0 6 2] 

AT S N=3<D*--£>T<<tr-zS3>7l'—l±%:&m 
Lfzmt&mA P 1 "C(4, [pJC<IEEE802. 1 HC 
#t£(Cfi£l\ S^WL 1 3fcT#*WS*lTl^*3SJtt/SA 
Pim58B«^ X^y^S 9tC7jrr<£?(C§fi 
L/cATS N = 3 0^-— IrV-rw^r— VXU— A£r 

ti> aSfl^n^^-vU^^-r + XhhJtK^n, Xv^y 
7>S 1 0*c^cfc^tc*(OJt«agm«:SlcBg#ft 

[0 0 6 3] 

ttEBSXtf r^Bu r*fen«> wt< i eeeso2. 

1 1 *C*iffi*cS6l/\ »Og*iatSATSN=4©* 

— b>f>r^->'3y7U-^ffljS?n, <^<qxt— 
s^jA^n, xfy^s i nc^t^^ic A T S N= 4 

AP 1 tS*WL 1 3fcTffl3£LT^«Cfc**»LT 
l/^o *£oT, Xf^y^S 1 4lC^cr£'PlC A T S N = 
4 <D*— fe >-r >r ^r— > 3 >7 l*tfMJg\lXftT%>2> 
Cfe36^ttBSnTflB*WL 1 3fcfctt£W4f{t?aie#g 

s^ntxf77s 2tc^$n, xf77S2^p,xf 

y7S 1 0#S8DjgS*l£o CCT\ M[hK4, S^WL 
1 3A^ffljSLT0^Bg#ft^rSOffl»^*fjSb. S^W 
L13ti, MH3A T S N= 4<D*— tr>"r^"Jr— z/a > 
30 7b-ASSi-r5CttfT^5o C(?)J:^C«WL 
1 "3^MIe3A T S N= 4<DJr— -t>"r * tr—zs s >yU 

WL 1 3(4, KttfJ^A P 1 fcoaBBWJSS«nfcWKS 

*i£ 0 fox, «K*«-ett, aite^AP ltfjuw-rsre 

[0 0 6 4] 

, — X^-y^S 1 Otc^t^tttEISS^ rjSftj r*fe 
ftfcf, Sltt^AP 1(4. Xf7^S 1 2 tc^-Ti:^ ^[a] 
^0 U<IEEE802. 11 tc^(c$£v\ ^Og^ii^O 
t^AT SN = 4^-tyf^y-y3y7l/-A^ 
WL 1 3tCjMfrf3o iS*WL 1 3TH CtD7l/ 

-2*&&m?z>£. xf77 , s i 2(c^*r«t-9(c^^ 

I E E E 8 0 2. 1 1 IC m^tltc T V isJL— 
^3>»W§o fiP%. SJWL 1 3 54, X-r-y^S 
1 3 [CSTJ: 5^:7 7 yx-y 3 yj ^xx h 7 A 
*fi«WSAP HCSSO. CO'J^XXMC/SSLTSJffi 
SAP 1(4, 7yyx-y 3 y'JX,-K>XiS*WL 1 3 
(Cjg-r<fc-5* I E E E 8 0 2. 1 1 (C^tCt^o/cMS 
50 »fW*fTS*1*o 7Vyx-y 3 >^!E^tC^7L/c 
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s*wl i 3tmwmAP 1 tom-va, T—*y 

" enc. 1 = e n c . low" (D-t^r zl iJr-f U 
^WcfiiT5 6 4 If y hOW E P«ffifcJ:>>f©*§ffcaF 

[0 0 6 5] 

ffl, iS^WL 1 3MI%gA P 1 Ttt, f**WL 
1 3&tfgiffi^A P lBOii«0-t*a-U-r-rL/^;l/Zi 

^1t?g^^O-tr^oLU^^x-7 r ;b2 1,11 oicgg 

^n^o ep^, ss^wl i 3t-^ mucTrs-tT.f'vr 

■fe^a. Vr^m^t^^-zL ■Jr^f~7;l/ 1 1 Otcgi^ 

?n§ 0 s«SAPim H7oxf7^si 

flMH««*0-b*3.y-r^7— 7j\s2 l tcBftStiSo SP 
"5, H4£^2ftSMAC:7U— A^O«5kWL 1 30 

T^-trXtf-fV hAP i oWi'Jf>ff-7^2 1 ic 
§S*tiSo StfiiiAP l oWj'Jf-ff- 
tt, H 1 OteSR-TJ:^ r»«BfeJ aWB*WL 1 3T 
»*-t*aUT"-f«IBW«ffcfcaaiSti*o *S!3fcWL 1 

tffflSBAP l-efe*-b*iUT-^flMfi*WctcB»S 
n^>o HP^> 0 4^Sn5MAC7l/- A^OSitt/i 
A P 107KI/X1 ^-TS^^r — ;l/K* 

x*t»*R**(8*WL 1 3ma'Jf^f-7;H 1 0 

fces«n«r 0 c coif /c icmtu £ n/cis* w l i 3ic& 

L 1 3^I7<OXT7^S 2TS5RLT*fc-fe*aUT- 
[0 0 6 6] 

c Xf7^S3T\ ^RS%AA' 

aU-r-rUHBtt, £ feSISS«fiSO«-rs B S S 

^i'Jf>f U^;l/«r3iiR L T H 7 tc *5tt £ X r -y 7 S 2 
[0 0 6 7] 



(12) 4#P*H2 0 0 4-3 2 6 6 4 

22 

<0»TSB S Stc^«>S«>6nfc«fllU^l/e n c_l 

^<OM*f£B S S*uB0LTf±. m 4 tC^TM A C "7 U~ 
l/Xt?BSStf»fiSh, CCOT KUX&lHr^-a. U *r 

^R«fi^;l/JM±-e. Lfrfc. a«Mii**^#-h-r 

T^§ 0 ifc, Stfi^APOS-TSB S SW<Dffi35RWL 
^>V/l/^**XhiifI, 7n-F^XhiI<ilC:fctt 
Sir+i'jf^l/^K, SKML/^l/enc_l o 

»%SAP iA^61fiJa*Jg5Snfci:#J*:tt. ft 

st+ay-r-f u^i/*io-roa»iLft««6. «*Bf 

[0 0 6 8] 

SWAP Hi, ttlffi«7C0N£WL 1 3fc*JU B 
S S l Jc^feHSSnfeKfiU^l/O-fe+a y-r-r 
;l/e n c_ 1 o w, fllt^B:* Sife^A P 1 A***— h L 
T^£^{gl^/l/e n c_ 1 o wJX±0-tr^^L Ur-f U 

I E EE 8 0 2 . 1 HCS^nn^MAC7U-A 

eiffl7U-AW, 71$ roi i oj - ro 

1 1 1J 42071/-L, lMlffl7l/-Am 

ro o o oj — r i o o i j ^^7U-^ffl 

A P 1 ^*B*<D»«*Jg5bfc«^*i:*5l/^T. A T S N 

_1 o wWltOt^a'Jf-f U^;1/^T3&4S*WL 1 
3tCil^p-r^cfc^tcLT^Sv^o £/c, Xf7^S4S 
l>(iXf7^S 6*3t/>T, ATSN = 2<?)^— tryf^r 

iMflLTSffiU^;l/e n c_l owWlO-b+a'jf-f 
U^b^TW^WL 1 3tCfflJOLTt^l>o S^C, 

on, WLwt. T-*y\s~K<Dm&mftmfe^%m 

a^S:i:*«:M.W-6oT7'^-trX#-<>hAP 1^ 
50 *ffiffl07U-A«:2SfiLT«ffiU^;l/e nc_l ow 
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[0 0 6 9] 

IEEE 8 0 2. 1 nci^ntV>§MAC7U-A 
<DTVisJL-is3 XDyU-lxlCte^ 09 (a) , 09 

(b) RtfB9 (c) fc^Tcfcdtc, ^(07 U— Atf-r 
j(D O^Sif Ur-^r— Kff! (Capability 
information)] f*3fc*ffifl!M*i: IT U If 

fflLT, SMAP Hi, »»H*7CO*5feW L 1 3«C 
B S S 1 (Dmi&iy^KD-t^zL 'Jf^ l/^;l/e n c__ 1 

ll/^;l/e n c_l o wJ^±cr>-tr4^jL U-r-r U^l/CD^ 

T*ag*WL l 3£»fcrr*«fc3fc:LTfc£</\, 

[0 0 7 0] 

CCDctdtc, ±ES 1 OSWBB«T?tt, 8«APl 
tC, B S S 1 rttCJB-r«4»5KWL 1 1 , W 1 1 2 0Lft<D 
B S S 1 rtWS£&^«S*WL 1 3^ilJ;^n 

(1 ) CCOiS^WL 1 3«\ a±t!l^A P 1 fi85fcWL 
l 3g^-tr4=-j.U^^^;l/«:aai*r^o 0 71CjSS 

<07U-A«rfiJ/SLT^5o 
[0 0 7 1 ] 

(2) IlgAPim COKWL 1 3fr£iISl£ 
nS^a'Jf-fl/^iffigAP 1 T^*-MT 
l^Wi'Jf^ U'WCfcO, L^t, BSSUCf 
&>£&£>n;fcgfgl^;l/e n c_l owO^a'JfY 

WL 1 3^6a»I*nS-fe^ra Ur^ u^wb s s 1 
[0 0 7 2] 

(3) s*wl i 3*6oaf*«*pr-r*ii*»ctt, & 

[0 0 7 3] 

cosmic, ±mm\ <DMffiBmic£m£. Bsst^ 

[0 0 7 4] 

J?*L<H\ ±12 (1) <D«-&. ifg^WL 1 3&, 
WL 1 3i#^#— h-r^-b^^U-r-f 

^igU^;l/e n c_h i g hCD-t^-a. Vr* U^Jl 

*»«ba p i tcis*n£ftruf> a p i ^«*w 

L 1 3(0»«*ffi5-r-5«^3b^>ft<3a:« o Sfc, HBJ 
U-^/l/e n c_h i g hOir^a 'Jf-r U^l/Jgrgiffig 

a p i jciifti-rntf, i HoatffH^T. ^mmrnmk 



(13) ^12 00 4-3 2 6 6 4 

p i h<omm<o^tmmx^, mmtLr. msk&b 

[0 0 7 5] 

B S S 1 rtO»«fiS«tSi*iB5Ktt, *^BSS 

i rtoa^Ha^^iflsmtffifi-r^iR^fijffl-rs bss 

nc^fe^to&nrcaffiU^l/e nc_l owi^±CD-tr 
[0 0 7 6] 

±IE* 1 OH«HB!BTtt, Xir^S 2tC*5^T. ffl* 
WL 1 3^1^AP 1 fcoaiT«««Ci*#a 

i 0(D«t^^ 'Jf^f U^/i/co^gift/gA p i tcil 

W6frT«*o S*WL 1 3it^tl,iT, S)ct> 
20 L 1 3^6I«lBAP lfcfflttSftTfeft^o » 
^igU^;l/0"fe^r^ 'Jr^ U^;l/e n c_h i g h<D2* 

«*wl i 3*^iiiAP ncia^ntts^c 

[0 0 7 7] 

Xry-fS 2lC*5^T. iS^WL 1 3a#*<*rr«± 

t, sew*, it%< tfena^wayf-c 
saa-rsJf^cfcw-ssjftHA p i oatHamco^ 

[0 0 7 8] 

30 i7(C/TtXf7 7S 2tC*5^T, JB*WL13l#tf 

£o SiSAPim Xr7^S3T^ C<D-fe*a 
'Jr^ U^;l/C0^tc, B S S 1 lc*5tf2>m&l"^Mcffi 
)%TZ>-t*^ Vr^l^OVe n c_l owttl^a 

tfe^A P 1 (±. -9*^— hLTl^-tr^JLU-r^lx^l/^ 
^^nti/^^tit iS5SWL 1 3<0»3Bc*fffoI'r^i: 

^ ^'jf^ u^w$snrt^i/>^t^is*wL i 3 

5-T*»^tt. Xf7/S 4^\jtt?o 18*WL 1 3^}g 
tt^pfrSkStt, SJfeSAP Hi, #IC, «5KWL 
l 3i:Stt6^AP l fc^«{c-9-^-hLTt^-tr^jiU 
BSS UcWSIib^l/enc 
_1 o wtt±o-t*a y f l/^;l/*I8?TSo 
APKt BSS nc^t§IIU^l/enc_l ow 

50 fgco^o, DciHigiScotco, *offi<o*aa«s*^ 
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l/^/l/«*WL 1 3 £<Dm(DmiElzm^%>-t*3.V T 
^UOlttZo m%l£. fflSWL 1 3^6il35P*nfc 
W^Ut^I/^I/F enc. 0" i:" enc. 
1" t. IB*WL 1 3 01«SAP 

JgttttfflFnJStU WWL 1 3£SiftSAP 1 £<DK<D 
ifOWa'jf-f U^;l/ti" enc. 1" £SJR£ 

n^o 

[0 0 7 9] 

COlRShftWaUf-f H;l/«JWL 1 3^ 

6 KIT. ATSN = ZO^Vr-f^-ya >7L/- 
ix^ftf Situate. ftuxEtf) I E E E 8 0 2. 1 lie 
«S?ftT^5MA C7l/-AOfIffl7l/^ SUP 

[0 0 8 0] 

[0 0 8 1 ] 

B S S 1 ftTte. B S S 1 iC^fe^toSnfcSfficU^l/ 
e n c_l owfiLhOWa'Jf^ 

[0 0 8 2] 

B S S 1 »ttffl^fcJECTH&*-M=-j. 

T*H\ SiftS A P Hi, B s s l »c^a6fi*6nfc«« 
^/l/enc_l o wW±C0-tr^o. U-r-f 

fclcBBUSlcK^ifc^o SiftS A P l a<«K*«lcg* 
[0 0 8 3] 

H7tt, B S S 1 tCiDALT^^t^WL 1 3 ^11 

^ap i £(Dm<D»fflz<Dnttk\*xmmi*rcti\ ±is 

<DmW<Dt%&iW L 13^BSS1 fcftnALT^**S*W 
L 1 1-WL 1 2<E>**fc:H#«|*.Tfc&l,\, KWL 
1 1-WL1 2<D5£*ti\ StftSAP i £ma\^&r>£ 

f-rf- :/;Mc{J:. B S S 1 0«fiU-S;l/0-fe4 l i , J-r 

fe, feVrvSr— S/aVOBEte:. HMf/<7 



(14) ^2 00 4-3 2 6 6 4 

26 

[0 0 8 4] 

(D^mit, swcgfcs b s stcs-rs, Siftsa^a 
*B^»«B*aDWo#i(BfcUTt»afflnri6"r**ao bp 
s> h 7 <d!«0^s*w l i 3 ^-stfts apk mt&m 
ap2^bss i £tem%:z>m<DB s stc/g-r sstft 

J»* WAfcf, CCT(iBSS2<7)S^AP2tCl^ 
(f> giftSfffl<OiHI. BP "6, D SiiflfcHs^Tfc. 

[0 0 8 5] 

B S S 1 rt^K, fflfctf, iS*W LI ltfffltBSS 

fcti, i^*T. SiftS A P 1 ^/ritlife^A P 1 
LT5IfiLT&&<, SiftS A P 1 **IBT 

20 [0 0 8 6] 

S$5fcWL 1 1 — WL 1 2, SiftS A P 1 #\ 5£^<£>-tr4- 

■cfctuf. *<o-b*-aUT--r7 L -^i/*#IHLT. bs 
s i nwft^«)6nftsfii/^w±ot*a uf 

50 [0 0 8 7] 

SiftS A P 1MS*WL 1 1-WL1 2<D5fe/?<0-t:^ 

tiHHti, BSSll:mifi^;l/enc_low^ 
[0 0 8 8] 

WMfflSftlOo^TlZ* B S S 1 WOStffiSA P 1 RU 
KWL 1 1~WL 1 2<DH*3.Vv'4 J r- y>U$, £ 
40 Tffi— OrtStfKStStU 0 5fc:5rr«fc -5 4. BSS1 

O-tr^ji Urw U^;l/<E>-fc*ji U-r-r1»«Stf B S S l 
[0 0 8 9] 

B S S 1 WTtt, SiftS A P 1 SOS*WL 1 1 
-12tBSSl TfrS-r a >j7--f 

T*fe§" enc. 1 " foT, fiffi^ 

WL 1 1-WL 1 2 Ot^f n*>^f-^ 7 U- A^: if^: 
50 BSS l^t^WtZh, 7P-F^tXbni: 
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[0 0 9 0] 

ffiS^^r I E E E 8 0 2. 1 1 iCJSJSSnTVS*— fe 
<0 2 O0«iai*»WT, bu#^: I E E E 8 0 2 . lit 
£fc"e*5o ^/c, JfelC7VS/x- S/3 >*ffftoT, 

-fe+i 'J f ^ l/^Of x y > t 
* - A*« W f 3 /c^OsSBSSail Jfe/g o T fir o fc^T 

[0 0 9 1 ] 

08 2 

$n§cfc-9^B s s i oassa^SKB s s 1 t^a&s 

ftfcJftfgRBO-tr+jL 'Jf^r L/^;I/^7d- K^tXht 
^^2 0iiffitc«^iifi->X7 : 'Atcoi,>ri}iB^'r^o c 

B&U *©aS5^:o^tai 2*r#BRLT»flirr 
[0 0 9 2] 

^2<0^fiBflg8gtc«Sii<i->X7 L Atioi>Tii, I EE 
E 8 0 2. 1 1 fc^Sftfc£— 3>:7U— AKJgKfi 
S ScOgfgRgcD-tr^xi U-r-r U^/l/tf»*j&$ft, ceo 

0 1 Hi. IEEE 8 0 2. i ncss^nri^MA 

r**/<!fy7^-1iH8 (Capability 
information)] rtttt* 
T»;if-^7^-;l/FA^t6nTt^o S*te®APi 
tt, B S S 1 ORfgU^/l/tO-fe^jL U-f'-r 

Site® A P 1 rtWtf — h LT^*SR«{Sl^;l/W 
l^^aUf ^u^i/^t, a^(iirt^< 
$Wir*xL Uf y U^/l/*c©U1f— 77*— /I/ Klc If 

[0 0 9 3] 
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BSS l <0»fgU^l/O-tr*jLUx^ fi 
WAPl tf+K*- h LTv^S^R«ffiU^l/JK±0-b 

£ 0 El 1 2 (D7sT>y7S 2 1 fC^*T £-5tC, CCOtf— n 

S S l KinALT^fc^flBsfe, Pitf, El l tc^-TflS* 
WL 1 3tf«t«tlfc^t5 0 
[0 0 9 4] 

«wl i 3<DSfiSBi o i -ea, xf77s 2 2^ 

T77S23 tC^T <£ 5 ICJSJ^W L 1 3 h Lt 

i/>£-tr^xi U-r-r U^OWc, BSSl OSfg U^yl/tU: 

Tfcfii\, 4S^WL 1 3 U-r* U^;Wc. BS 

S 1 0«ffib-S;l/JM±ofe©*^^i:*tt, gite^AP 

[0 0 9 5] 

c cm B S S 1 fO^fgU^l/CO-tr^xL Uf^ 
tt" e n c . 1 " 0 . Sffi^W L 1 3 (±. " e n c . 
0" fc M e n c. 1 " W-MT^5OT, 5^*W 
L13(t gtteimAP 1 fcfcttWWB*. *S*WL 1 
30t+a'Jf^ U^;Wci±, BSSl ©Bffil^A'JW 
i5g^WL 1 3W\ C O" e n c. 

i" ti^^iLV'r^u^v^miRLr, sssiap 

50 'Nil**, iltRL/c-tr^xi Ux* U^;l/*ii33ib. fct"R 
[0 0 9 6] 

507, IMAP 1 0 7 £>X-ry7S 3 JSrltBg 

LTtgt\ «WL 1 3«\ Xt^^S 2tc:fc 

l^T, KWL 1 3lMtt§^aUf^l/^(D 
If-nV^U-AfCTiffift^n/cB S S 1 <DiI{g 

tfefi^o ) Site® a p i ^iiaj-rntffii^o 

[0 0 9 7] 

ftfcB s s i oii^AP i ^i£b s s<omi&m(D 

50 U^/bT»«^«*«#*^»a«LT*6»«*ll!tt 
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[0 0 9 8] 

KWL13^I«APl(:jhfU probe 
<DM>&7 (probe request) ^jHfl 

U fntC^LS^lA P 1 #p r o b e (DJSS71/- 
A (probe response) "Tir^zL 'J-r-f U 

[0 0 9 9] 

±mm 1 OH35Sfl5^T(i, IEEE 8 0 2. 11 

if^tCO^T, H UC^bfcB S S 1 
[0 10 0] 

CCT^ N ^lO^jffl0BJ!Si:|5l8L BSS l^SffliHA 
P ltc, B S S 1 teiPALTt^l^JKWL 1 3#Jg|£ 

[0101] 

«WL 1 XT77S3 1 ICtt&olzMt&mA 

P 1 a^SMff ^n^tr— nz/y\s— A£r§{fU 

WWAPlK««t^<, Xfy^S 3 2tC^-r 
J: 5 IC7V S/x-S/g >©g$7 l/-A*SfflS A P 1 

[0 10 2] 

fuj$L/c£5tC, IEEE 8 0 2. 1 1 iCfflSJnr^ 
£MA C y b-A(7)7Vyx-y 3 y©7U- AtC&, 
(39 (a) . i9 (b) RffB9 (c) iC^fsTXolC^ 
^7U-A^fV(?) r^t^t: iJxy— «* (Cap 
abilityinformation)j P^tC^^ffi 

*WL 1 3CD3Mfia5l 0 7 It. £<DV If — 7y -< Jl/ K 

^^'M< £t>0rS<E> 1 o£:C<oy-»f— 77 j — ;l/K 
fc«£i£^ Xr77S3 2^t<t3I«SAPnc 
SUIT 5 <, ClTU 3S*WL 1 3<E>2Sfig|5l 

0 7m i#Oto4TO-lr+a'Jf^^;I/ (" e 
n c. 0" " e n c. 1" ) (Do%<D 1 OCQ" e n c. 

[0 10 3] 

cn^sfibrc®iftiiA p i (ommmz. m \ <Dmm 

3W\ §«LfcTV->x-->/3>0^7U-A (As 
sociation Request) tCfit&^nT 

^§^wl i y r--r u*<7i/*ffitB u ceo 
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■Mr a y-r-f U-<;b^gift/§A P 1 <D*z*zl Vr-tr- 

7;i2 i {cassnn^ bssi ofifgu-oi/co't* 

aUf-fl/^;I/fcJtRt5o flS55fcWL 1 3^6iffifflStl 

P 1 h LT^5-fe*a U-r^r U-Ol/T&D,. L 

BSSI Icfe«t5«fil/^;l/©t*i 'Jf 
;W±coi:^(cti, xf7^S3 3{c^t"«fc5lcas*w 

l i 3©«ftt*fiFpr'r*i:WBfr*o ttz. b s s i <d 

70 7 7°S3 3 tC^Tcfc -5 (CiiS^W L 1 3 CDjg^Jgg-T § 
fc^JBrTSo HP^, JS^WL 1 3^gi^§ti)^ 
tt, #0* If, I E E E 8 0 2. 1 1 OJHS*C|i£l\ 
7 7*S3 4 C/^t 9 C7V yx-y 3 y(D]£S7 
A (Association ResponseOSt 
a t u s code) tc, M^T^^iOn- K 
4S*WL 1 3fciIfrT3 0 iS^WL 1 3 

co^i^-A^ffrsc^tc^t), bwa pi 

20 [0 10 4] 

-7?, iS^WL 1 3<0SIBc«:?lFpfrsig^«. 8*WL 
1 3fr5iiftl2tifcB S S 1 O«fficU^;I/C0-b + 3. Ur 

* u^i/Tfe^" e n c. i" zmm-TzmmcDrctb 

tc x IEEE 8 0 2. 1 1 > 
3 ^(DJ&&7 U— A (Association Res 
poseOStatus code) ^ JS8%T 
feSgOn-K*»trii^ X-r^rTS 3 6lcjjVr<fc5 
tcffi^WL 1 3(cigM-r« 0 
[0 10 5] 

50 Ctl«:SttT. *S*WL 1 3Tii N IEEE 8 0 2. 1 

^ap i fcoHi-e#tw-r*teftoi8iifflao»*cxT-^ 

7 P S3 7te^-TJ:5»c*— tr>7V^— v'a >7U- A 

<D*— -te>7-^ J r—iSB XDfBMlt. I E E E 8 0 2. 
1 l^{^oTHR?n5o COfiWcDBLTtt, 
IEEE 8 0 2. 1 l<Dffife\CV£oC£fr*> % *<Dmm 

[0 10 6] 

[0 10 7] 

(» 4 OH jfiflgffi) 
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S B S Slc^46^«>e>n/c:«ffi|80-lr4-jL U^-Y 

a*nff r* jSttra dt&s 0 

[0 10 8] 

M*.tf, ieee 802. i ncK^nn^iSL 

AN'>XrAm H10«*WL13tfiiBAP2 
tCgfiBLT^fcfc SiftS A P 1 (DZLVTftlC&W) 

Lttfti^lCtt, KWL 1 3i:l^AP 1 fctDRB 
Ttt'JTy^x-S/gV (Reassociatio 
n) *«j|fT<£*l*o fit, l(D'J7V^x-^ 3 >? 

So 

[0 10 9] 

1 'J7V'>X->> 3 >©gS7l/-A (Re as 

sociation Request) ^CO^^ffl^a 

£tiS 0 
[0 110] 

UTF. H UC^ Lfc«tl»L ANi^X-rAtc^T, DS3£ 
WL 1 3 ^atifeS A P 2 0X»;rA>6SiSAP Id 
imc&ftU I^APncJtLiJ7y^x-> 3 > 
#^feSftS«^lcol^T, Bl 5 ^t7u-ft- 

F**aaLTiHwr*o eh sk^t, 01 3t 

[0 111] 

P 1 ^62S«*n*l£— n^7U-A**«Lfc«, 8 
i*§APn:S^<, Xf7yS5Uc^tj;^c 
';7V^x-> 3 ^g*7U-A^S«AP 1 

frrs 0 

[0 112] 

I E E E 8 0 2. 1 1 tCj|SSnt^5MAC7l/-A 
©U7V'>X-: ^ 3 ><D7U—L>iaZ, HI 1 4 (a) - 
(c) tC^-Tct^tc, ^CD!7U— Atf-r-f CD !~c a p a 
bility informationj 1*3 IC jfefigflj 

[0 113] 

KWL 1 3©aS«8Bl 0 7 fri. Xt-^7°S 5 1 tCTjcT 
J:^*CCC0U-!f~y7^— yl/K*CfiB*WL 1 3©t*- 
b LTi>S-tr^ai ijf^ l^/l/co 5 tt>i%M 
<D 1 0«r»*ii* x I«A P 1 tc^ff-TSo fflittf, 
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CCTU JS^WL 1 3<Di£«an 0 7m 
OiTO'fe^iUf^l/^ (" enc. 0"" en 
c. 1" ) "enc. 1" ^T^— 

ii^ ffiifc/gA P 1 tCj&ffif So 
[0 114] 

C<DVTV v-X- > 3 >C0 "7 U— A*§fi L fc£J&J3 A 

1 3^Xr7/S 3 3teBB"r«KK*#BH*ti«:t\ <@ 
U Xr7yS3 3{CT«*WL 1 3<0»l«*Jg5f * 
10 IEEE 8 0 2. 1 1 >J7y*> 

^-r^-ptc^wL i 3tc5gfi^ns 0 tfc. ss*wl 

1 3 0»«*fffpr-rS»^tt, IEEE 8 0 2. HO 
^tcSfV\ U7V>'X-i/3>e§7l/-AcOXT- 

Xf7?S 5 3lC7jk? <fcdtca«*WL 1 3tc}g{f£ 

nSo 

[0 115] 

20 a p i #ag5fcw l i 3 oaassfrRi ufc«-&, a 

«AP 1 t, «WL 1 3fc£Dfflt% B§-*f/<^* — * 

A^snsc^^h^nso ^orctftc, hi 5 

13i:|p|aHc. IEEE 8 0 2. 1 1 ©jg^»Cf(&,\ Bg 
t^7^-^W*WL 1 3i:l^AP 1 fcOMTJt 

[0 116] 

S*WL 1 3*60'J7y^x-J/ a ><DW3<7 
30 U-Afct±, «WL 1 3**Siffi»ttl,TV*«ifiJg, 

ip-fe> A P 2 07 KL/x^saa^ntt^o CCO 

7KUXtt, HIl 4 (a) — (c) (C^^tlS r^ffico 
APT FUX (Current AP addres 
s) J tffiStSo 01 5 tc^L/cci: * 

P7KUX (Current AP addres 

s) j ^stc, s%^ap is, mmAP zKmwvt 

S 0 fit, SilAPKt SifeJiAP2<D-tr*i'J 
r-7';HcIg^ nti/^KW L 1 3tCOl^T<D 

^AP 1 ^iS^WL 1 3£cD|ffl-C\ Bg^^5^-^0±t 
W^nSo fi£oT. SJWL 1 3^Xf7yS 5 3t* 

^nssite/^A p i ^ 6««i*WRr *nfc«*c ffi^w 

LI 3(t C<D4gj*WL 1 3 kSM&^A P 2 i:<0|SI^jifi 
tl/c^-^^l^-A^Sifi^AP 1 ^OP^T^ff-rS 
50 [0 117] 
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CO 1 18] 

(IB 5 <DgS«BB«) 

TJi, SSWL 1 3^It|!liAP 1 fcOfflT. SftS/iA 

p i o/s-ts b s s i tc^»s*&nfc«fiu^;i/w± 

L*rU iS^WL l 3**»fi»A P l kilfg-T^ 
kfniBttCx S*WL 1 3***t&SA P 1 «n<OB S S 1 

466hfc««U^;l/*0fittntf, tt*fcLT. BSS 

T-AtC^l^Tt±, SS*WL 1 3 #EI1 6lcijrTcfc5C 
&33$i3*;WL 1 4 t»cj»»S»LT^5i|^c, 
WL l 3#XttJBAP lK:»«iB*Lrci:LTt>, TIE 

jcsi^-rs#>«*tct!eoT, bssi tc^^&^nfc 
a® co-tr * y t- ^ ^?t«*r 5 c *< t* # s o 

[0 119] 

«*WL 13(t BSSI Ki^&^^n/cftfgCD-tr^ 

nit bssi fo<DMmmm^*ffimctemm.T*z%: 

^&5\c?Z£ £i>m*r*&Zo fifoT. BSSlrtO 

(i, f(DiJ|g^^aiJt-f U^<;l/*B S S 1 CDfilfg 
[0 12 0] 

[0121] 

0 1 6lc:fc^T, 01 fclffi— ttH— KF-^*f*LT 
tOMWS^W-rSo 0 1 6(CilfcBJWL 1 4<D^ 
*-KLT^5-b*aUf^ U"VW4" enc. 0" 
<DfrT*2b%£-rZ>o ffl*WL 1 3tfliSAP 1 
<D»**lllttfrr*IKfctt, S*WL 1 3fcJ\ rocffl^w 

1 1 4icmmmzti. tcomcomm^^v^^ 

;W4" enc. 0 " T'feS k{££-r 3 Q 
[0 12 2] 

CC0J;3*^^Cfcl^T> «WL 13tfBSSl CDS 

So 

[0 12 3] 



(18) t¥^2 0 0 4 - 3 2 6 6 4 

"ACT, BSSI ^*6^&£>ftfcfi{g^^U^ 

u^wiasnsii^ico^t, 01 nz^Ltzy 

l 3fiu §flb/ct:-3>7lx— AfrSSlftjaA P 1 
«R«»aft**a«fiO-fe*iUT-W enc. 
1" TfcSCi:*55PSo ^CT\ 4S5fcWL l 01 
30X77^5 3 2^C?S(i{C, 0 1 7 tc^rT fflSftft 

[0 12 4] 

70 0 1 7©Xf7yS 6 1 tC*5l>T> S*WL 1 3 <EHr* 

i'Jf^ ix^yi/tc, bssi ^mmztizmt&i'^v" 

enc. 1" W±Ot+a>Jf^^;l/»t$nT^ 
535«B$n5o "enc. 1 " BlhOWa'Jf^ 

u^W^wl i 3»cffljRsnT^5i:eK:«, Xf 
•y:/S 6 2^\5ttfo COXf7^S 6 2C4ol/^T, Sft 

«wl i 3#«i«sj|»snTi^«fi«*. ep%, «5fcw 

L 1 4 £«7fcWL 1 3 £<Dmcomm<D~t*^ V"rj 
;WB S S 1 T^S^nSgfg^^" enc. 1 " fit 

20 WL 1 4 4:<DK<Oiifi^"b4raU-r>r U^/UtfB S S 1 

-eg^ : g^ns^^gu^;^ ,, enc. 1 " w±Ta&ntf, 

6 4-Mt^ 1 3 hSi^A P 1 £ 

<DW<D»tt^nwmi&i<tiz>o hp s*wl i 3tc*> 

^TH\ 0 1 3^T7^S 3 ZVL&cnmmtfWfiZft 
Z>o — 2u S*WL 1 3 ^fi^WL 1 4 £(Dm<D^^zL 
Vv-j U-OWB S S 1 Tft8Sn*«fil/^;l/ C e 
n c. 1 " ) icmrc&^tZl*. Xf7^S 6 3^Not 
5S*WL 1 3 «*WL 1 4 i:OFI©I»M 

50 [0125] 

±Sabfccfc3K:. B*WL l 3 hiS^WL l 4 4:<oii(l<D 
alff O-tr^n. 'Jf enc. 0" T&Z>fr 
6. Xf7rS6 2^Xf7^S6 3^ S^W 
L 1 3 hiS^WL 1 4 fcOHOj!Wl«»«tf«IWrSn* 0 
*<D'ik^ L13li, IEEE 8 0 2. 1 1 icMfe 

^tlTl/^^V^-— b^T-^y— f>H > (D e a u t h 
e n t i c a t i o n) WT^ntXf^yS 64^ 

[0 12 6] 

L 1 4 ^orao-tr^aU-r^ u^;i/#»«ai**n*a 
mm A P 1 A^^D— F+tXh^nmi U-r^ u 
-^;i/<fc0fi^^k#tett, WS^wl i 3«^wl i 
4 fc<oj»t«»«#«iwf*n, kwl i 3frz>mt&mA 

P 1 tCS^-^A^nSo ffiot, BSSI OSfiBB<0 

kap i fcomo»a»«#fiisg*c*ssti«o 

[0 12 7] 

fW. Xf7^S 6 3T(i, iS5£WL 1 3MSWL 1 4 
50 k fi«JIKLfc», SJWL 1 3k5S*W 
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L l 4 fctt, SJgB S S 1 O«{0cU^;l/tt±O-fe^i U 
[0 12 8] 

±iELfcgf2W"C ? «\ S*WL 1 3«WL 14010 

;l/^B S S 1 0*fiU^;I/W±T*a»ntf4!B*WL 1 3 
kfftofllB**: h WW ffl*WL l 3#Hr 

[0 12 9] 

Hk ±IH»WT?tt, WL 1 4 tmWLigWtl,T^Z><Q 
*WL 1 3O»a-*«tCfc0B!WU«:*^ B S S 1 H\Z 
g&£{fficDB S S 2CO»tt!2^A P 2 ^SailgjfttC fc±K 

© l o l oot+a 'J f >f 1 7 > LTs en 

a w-ntf r * -tr x # > h a<«g5fcw l a tfffio t * -tr x 

^-OhfcoaftK*— SLWlKLTfefil/^o foil i&K 
[0 13 0] 

-tr>"r^ ->3 ZVyx-v'H >\ U T V :> 
x— ->3><oi8Etc. JS^WLl 3<D-tr4^ Uf>f 
^r^-x ^y^-T ^if^tc*ou>T. 0 1 8 tc^Lfc"7o— 
t-h^M§lTP^ 0 ML Ell 8fcjSLfc«lS» 
fHi* i7(OXf77S3, 11 3Stf@l 5©Xf7 
3 3&HlC#JESLT^3 0 
[0131] 

3S^WL 1 3 0WjUt^ U^;l/%fx7*t5i 
£\ £u3^L/c£ 3 fc N iffcfcWL 1 3 ti, ^-tr^f^^ 

[0 13 2] 

© iaa*wL 1 3*<»a«aftt«nTv^i»**^^i 
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[0 13 3] 

© wwl 1 3^aftMHmKsnTt^«tiii3ts«i#^tt 

ccr% 4SimwL l 3tffflft0«£tttHi^S£ftffi 

[0 13 4] 

StlAPim XT7^S 7 llcSt<k^C7l/- 
i**g«U Xfy^S 7 2 fcgVT £ ? tci£j5£W 

/0 L 1 3 'J f x 7 *t5o *S^;WL 

1 3(0"b+a'JT>f U^;WB S S 1 tc^to^nri/^ 

y S 7 3^\it^ *ttaWBgS*l*o BP'S, IK I 
3. »4<oS6«««TKMLfeJ:d«c, fe^r--^ 

Ix-A(CT, »J9Bgg^«5fcW L 1 3tC3i£Q2n& 0 
[0 13 5] 

— 75T. SJWL 1 3^a'Jf^L/^WS«^AP 
lW*-hnt*a'Jf^U^bTfiDv LfrfcB 

20 ssi tc^enrv^sfsoHz*^ v-r-i' u^;wx± 

Sfcfc:, Xf7/S7 4'\ittr 0 ±85(Di£ 
^tt©<oW***&, iS*WL 1 3lcSB£Jfc»S*gLTi,> 
*«*^»*»tf#ttL4lr^i:«»rLftfc*«4, Xr-y 
7S7 5^\il^ S*WL 1 3(DM8SS^I^oI?n 

So r^is, mi, si 3. m4<DnMBmrmmi,rc 
uyy->x-^ 3 >c7D^u-AtcT, a^jsixottqrtf 

«^WL l 3k:att*n*kfcfete*«!©fflaw*934L 
fci:Pa*cHfT*n«e c<oJMtcte. HI7 cqxt-^:/ 

30 S 6, H 1 3C0Xf77 P S 3 6, M 1 5<£>X-r>y 5 

l 3tc3Hft^»«LT^^*tt*^a6flSS* <; ffSE'r*i: 
ffl«Lfcfc*H\ Xt7/S7 6-sI0 0 
[0 13 6] 

Xf77 P S 7 6tC*5^T\ XT77S 7 1 tCTgftbfc 
ItWfc, ©iC^Lfc HSS^WL 1 3kSft»t»»»EbT 
l^£«S5fcWL 1 4 fcOF^tD-b^aUx^U^l/J rt^S 

W 0 S*WL1 4 ^OP^-t^UrW l/^B S 

XTv^S 7 5^\j1^. MWL 1 3<DM 

n^J-r<r U^/WcSS/cfcl^^ Xf7^S7 

^<;b^Wftt:*«, Xf77S7 7^\I^ S*WL 
1 3^6©»ttH**<Jg5*n*o SBK S3, S4£D 
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X. co»3B!S*ofi5ti, «*WL l 3lciISi£ft 
[0 13 7] 

— ^a^'J/V^X-: i/g AlCT\ fpj^tc 

3««b*wl 1 4 fco^s^ww-rtitfaasHA p 

T> 5SmWL 1 3tttt*WL 1 4 fc©j&tt»«*«SrL 
0O*lf , I E E E 8 0 2 . 1 1 fcj»£SnT^* 
■r-T^— tr>*r-r^— >(Deauthentic 
a t i on) £:^7L*:&tC, Sft, gitt^AP UcJ£ 

[0 13 8] 

Sfe* Xf77 s S7 7t\ »3MB**}gSLrc»lv:, I 
EEE 8 0 2. 1 lJcaSSnt^4MAC7U-AO 

ro i i oj - ro i i ij *ifo7U— a, msm? 
u-Aoi^ ro o o oj ~ ri o o 

U 4K©7l/-A%PWLT, BSS IT'ffSJns 

b s s i T^s^rnsaffico-b^a yrv 
i icmtmmt'no c twvzzo 

[0 13 9] 

£/c, ±EKMTtt, »L 1 3#iS*WL 1 4C0 1 
^IcfcoTfc, ±I2^[WJ«^LT, iS*WL 1 3fi, BE 

y-r* L"<;l/*?-x >y ^-TtitfM^o 
[0 14 0] 

«c W* ±lBttWi* siS^WL l 4 ttm 

tf, B S S 1 £teg&£ffl2<OB S S 2(7)1WA P 2 CO 
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8«K*4»Lfeltf»«irft5tS, SIS 
$Kl±, f O 1 o 1 ij f-r U^l/*Iftt 

^;b£r^x *y ^ftitfM^o 
[0141] 

«6 0lBlBg» 

20 §cttfT*S5o ccm 0 l 9lc*vr<fc5tc, bs 
S 1 tC^-T^JS^WL 1 2 IC. B S S 1 tCteimALT^ 

*^**wl i 5*<»«ia*-r*ii#*0(i*cfcowwr 

tt" e n c . 0 " <DfrT*&Z>o SfcfcW LI 2it B S 
S 1 fcinALTVSfcft* iS^WL 1 2**ii{f*r£gllC 
tt, B S S 1 icf »£»5nfeifiBO-t:*a Uty U 

L 1 2i:5gi^WL l 5 fc<DHk:*5^^TSgaiS«ti*o 
50 [0142] 

02 Of*. 4S*WL 1 5^6S*WL 1 2 'xattfiSW 
§Jf£-tCfctt£, S^WL 1 2h«WL 1 5 ^^0M« 
WS^IK*5*bTl^*o Eh 0 2Olc*5^T\ 13 7 tm 
^»K:ttBI--«F9*(*LTWBH*1Wb, WRcSfc 

[0 14 3] 

0 2OIC*5^T\ 0 7lC^$n^fflt{il^TcOjaiI^ / F^ 
40 ht^So ttOXf-vys 2-X-r-y^S 1 2ttBI7 £ 

[0 14 4] 

112 OlCTTsf^olC, SJWL 1 2 £ag5fcWL 1 5 £<D 

1 2^^*^f£LfcflliJCDffl*WL 1 5(7)^'Jf 

50 B S S 1 cD^fg 
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^■fe+j.'Jf-i'l/^;l/W±T*6ntl S*WL 1 5 (Dm 

fflJO«a*OjS"T«B S S l©MOt*a'Jf-rl/^ 
KTT*tltf, «WL 1 5©«»WES«*l*. ^ 
tfUFoJT'&tUf, SK-t*aU'r-r U^Wci*i»"r*BS 

[0 14 5] 

ft, iS*WL 1 2tfJD*WL 1 3**S»8BfiR*»*fc 
fc#, ^oa$*WL 1 2WS*HAP 1 i:^«!»SKLT 
V>*^5*^*^*>6*r, S*WL 1 2(4, 02O(C^; 

[0 14 6] 

El 1 9tC*5l>T, KWL 1 5t4, lgf-^7b-A 

*flS*wL 1 2^as«-r*^r-K3yigflastis»^tia& 

So COt-KttTKt^* (ad hoc) ^-Ft 

T, 0 2 I *c*-r7n— ?-ir-h*#HaLTlBWr*o 
[0 14 7] 

B*WL 1 214, Xf7/S 8 1 tC^T£5tCiS3£WL 
1 5*6, a*S«r^*-r*Citt»a»5feWL 1 2\ZftXtc 

A(4, tfllxfcf, I E E E 8 0 2. 1 1 <D*JI^C 
04{C^L/:MAC7l/-AO7l/-L3>'hP-;W 
Ol~To DSJ Sff TFrom D Sj tfttlC To J 

[0148]" 

5S*WL 1 2<D§{Igin 0 1 T*(4, COf-^7U-A 
^§il/-clSlclJ:, Xf77 p S 8 2 tCTjrTcfc? Ic^cQjg 
mft(D T VlsXlz fcfoSf S -tr * jl U «r 4 1f ffl^iS* W L 
1 2c0ir^o. 'Jf^f-^ 1 l 0lcBS£ttT^5fr 

[0 14 9] 

S*WL 1 5 <D-b3r a y -r -< fgfStf-tr^ 
;WCSgSnTl^££^«5 Cfcte. a*wn 5(4, UK 

*wl i 2 taRt+a 'jf -<f-7;wciasnr^ 

SBSSi tc*a6^a66nfc«fau^;I/W±o-fe*a y 

2*, «5KW L 1 2 14, 0JxJ£. E E E 8 0 2 . lllCi 
7£(D, &m\stzT—Z7 U-AtC^t-TS A C 
£«3fcWL 1 5^fIU iB*WL 1 5^0[»f-^ 

[0 15 0] 

-75n Xf'vys 8 2tc:fc^T, 8*WL15(0«a 
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y -r ^ isffl^-t* i y r- T--7>uc&mznri^^ 

4: #14* C<0££T*(4, ffi^WL 1 5<D***Vv-4 b 
8SWL 1 2(4ffi*WL 1 5£ 
©HTl4ifflffl#T>*4V\, fcT, Xf7yS8 4-\I 
±fBACK^U-A(4^{|^*rtC, yfKWftgWL 1 

i> 0 C£>iISK4, I E E E 8 0 2. 1 1 tCjg^SnT^ 

w Jf£\ 7ft ro i i oj — ro i i i j &£<o 

7U-2*, WJ»ffl7U-^<o«^ v-rz^-fft roo 
ooj - ri oo u 64f©7 A^r^jffl \sxw$x$ 

[0151] 

C ^iiai^tt/ciS^W L 1 5(4, HI 2 OM^L/cX-r 

y^s2w»o»a»f^*H!»'rntfat\ ±aL*x 

f7^8 4(C:fc^T, SS^WL 1 2t4, ACK7U-A 

u zv'&mz otc^-rx-r^^nfT^nTtat^o 

20 [0152] 

ii 6(c^-rj:5tc, fe^e^wL 1 4tmcmm 

^LT^Sif^tc, Stt&jiA P 1 fc»L«8BBRLfc 
^tc, SJfiSA P 1 (OB S S nc^f 46^46 6n/iSfiU 

Lfco cntc^/SLT, 39«C, 02 2tc?jrr<fc'3lC, fljfi 
*WL 1 5#K«cfc*4IB*WL 1 6 4:jra»««LTV>« 
<b£, C«*WL 1 5«*WL 1 2tcS^*-TS 

i0 [0153] 

•~OW4" e n c. 0" <D#T*SS 0 ffl^W L 1 2(4, 
B S s i KinALT^Sfc** KWL l 2tf9fi«rH 
&rT3^(C(4, B S S 1 tc^46^i66nrc^fgPScD«t^ 
a Uf^ U^Jlim&^Zi&^tf&Zo ^(Dfc&blC (4, 
0 1 8JC*Ltefe(01:ra«(0«liS!»ff*\ S*WL 1 2 

-emairr s <£ 5 tc-rtuf 

[0 15 4] 

02 3(4, S*WL 1 5fr6«*WL 1 2'\«ttB3jW 
40 £if£-<D, S*WL 1 2£i$i^WL 1 SfcOfffl^iaH* 
■**LT^« 0 Si, 02 3(c£>l^T, 0 1 8fc|p|— S5 

fcO^TlHUHfSo EP*>, 02 3lC*5l,>T, 0 1 80S 

1 2Stf«S5EWL 1 5tc*5tts«iaiigftmc*nEL, mm 
n^o for, H2 3**8at*KwicHLttt, 01 

«WL 1 2&O r 485fcWL 1 5(cg^^x.ntf, 

50 w-r * * t t a: < a*Br*BT & s . 
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[0 15 5] 

£/c, (gj 2 21C*3^T, S*WL 1 5tf*-b>f^ 

7D— KOffla»ff*^aSUft8HC, 02 3^ 
<ti, ffi*WL 1 2tt. El 2 1 OXf7 7S 8 1 T\ a 

*wl 1 5^e>. att&»*^s*tem««*wL 1 2tc 

CfcfrS, S*WL 1 1 2!^OiS3££cD 

«w»«tc. stwL i 2©i«bs s i com&m<D 

[0 15 6] 

±IBWBBTtt, ^3fcWL 1 5*mWL 16010 
IC IT, 8*WL 1 5«4. Rfc*«LTV****^aS% 

£ KWL 1 2*4, XT7^S 7 6tC*5l>T, 

[0 15 7] 

[0 15 8] 

±12* 1 ^6<7)HW»rti, B S S O-fe-^ jx 'Jf-f 
tt, I B S SCfeV^ ■b+a'Jf-f l/^««RTS 
[0 15 9] 

COS 7 0 2 4JC^Lfc*-9*«fltO 

I B S S 1 *0J££91HWr£o 
[0 16 0] 

0 2 4tCj3t>T, I B S S 1 fi, fflSMX «**f, 30 
Offi*W L31-WL33 Jb^WfiltSnT^So *S!*W 
L 3 Hi. -fe*a ijf^ U'W e n c. 0" . " e n 
c. 1" S*#-hU B^WL 3 2&, •fe+ay-rw 
U^yl/' e n c . 0 " > " e n c . 1 " N " e n c . 



(22) ftffl 2004-32664 

42 

2" «v9-#-hU iS^WL 3 3W\ -fc^U^-fU^ 
)V % e n c. 0" , " e n c. 1 " ht^iO 

[0161] 

IEEE 8 0 2. M ©»6fc:J:*ltf, I B S S tt v S 
«&B**>S*l^"e, I B S S W<D«»<D4S5feHT*— fe 

-A£iM§«^£C£tfT*t£ 0 I B S S 1 rt^iS^ 

/o :7;Uc I B s S l *««t"**i|lll*o-lr*-aUT--<fl|« 

^giibT, i b s s i rtT^»««)6nfe«fiiHo* 
^^u-r>r ^;i/JM±T3ffl«-ra«fc5Jc-rntf, ibs 

[0 16 2] 

#IJ*.fcE, KWL 3 HC. I B S S 1 iCfinAbT^ 
[0 16 3] 

»^b<t4, i2 nc^Lrccfc^^saiiKi^ii 
oaasssw-rao *-<of^ «*wl3 4^6, fe 

50 \Z. H2 3lcSt*i4»»ft*nttlSSti4 0 fib, 

0 2 3 tC^^n^S^W L 1 5 tt. *SJ3*cW L 3 4 

y(D7U- AtC, WWL3 4^^a';f 

^ U^;l/«r**3it?i:i:fetc, ±fe®^6®<D?'5<D'> 
a < 4: fe l o***^, 5S^w L 3 l 'saMI T S D * 

3 4fr6§«LT\ [H2 3*C^bfc3ffi 

[0 16 4] 

40 C<D£5tCbT, I B S SlCfcl^Tfc, I B S S tC 
[0 16 5] 

Tl^§ I B S Srt<0«8*T***fc#»Ctt, SaS-fe+aU 
[0 16 6] 

50 m, fQ5k£^r>rc$mL ANzmfHTzmmmmmsv 
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Uff TIBO (xl)-(x8) tC^L 

fc*«*«A*ck»cJ:0. BSS^IBSS 

i b s srto««5i«*iBT*afc#fctt. j &t , ±ia» 
ml tie (xi)-(x8) mcmt&m 

[0 16 7] 

(x l) egficfctK fi<0ft«raAttBTfe«&l<DftE 
fltaflttBfcttlMHKOTSRR, ffifBS 1 O&ffiif 11 

S l <0*Kttafi&B £ <£> B®a«"CJB i/ > 5 -tr * y -r -r 
U^1/T*$5S l CHr^y-r^ U**;l/*4>ft < l 

oa»rr*o 

[0 16 8] 

(x 2) tuieSS l 0«»3M«llti:»b»«K*-r« 

;l/*a»rr*o 
[0 16 9] 

(x 3) mzm i <Dmmmm&m*i*wtofi<Dm&> w& 
4rn y x-f u^i/*3B«br, ^n^tuiEfg 1 OMJUI 

[0 17 0] 

(x 4) huIB^ 1 (0^*aiif§»S^Sift^©ig^, gSH! 

aaot* a'jt^ u^;i/<o a % <7)v>*rnfric — at" * 

WES l OMt»Att11lc»L»S»^«RR»caifil-r 

So 

[0171] 

(x5) SttBtf* tt<DftUtia«ttllTft«»4 0M 
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»5S3^a'Jf^ U^;l/««ijtt«Ot>0-b*ay 
(IP'S, 0U*fcf, BSS^IBSS) tc^i6^46 6nfc 
U (b) '>ft<£fc, flulB^3^-tr^a 

[0 17 2] 

/0 (x5 ') Suf2lg 3 O^Stt. AWE8 3©'t*a'Jf 

Wa'Jf -r U^/l/T*fe£3I4<D-fe4^ Uf^ u^oi/tf 

mmt<Dmtw*!L. (t>) jwE*3©-t*3y^-f 

• U^;l/tfWE«ffi U^;W± fc: ft ft <^ 4: * , $> 3 

SSftfti/^S, sSc^tt;. mifBSS 4 oftjRiaffiSBtfButS 
fg 5 £>»USae&fi i: «te Stt L T ^ * * *c bu 82SI 4 
(O-fe+iy^^U^l/^WTftSfcStCtt. miES4 

[0 17 3] 

(x7) gSBtfS*M'?««*l^ iSBO/g-TSffl 
it y/l/— y ic^&bfetb h tift fiifg U-^/l/co-t: 4=- n 'Jf-f 
U^l/tfci/Hi, K«filx-^yl/tt±0«»fl[)-b*ay-r-r 

50 [0174] 

(x8) mzwz4<Dmwmmmmfr%m$L<Diz*zLV7' 
as?LT, *n*HaE^4o^»a««B^a»i"r** 

5 So 
[0 17 5] 

^ftH) . T^fVX^ (CD-ROM, DVDft^) N 

y ft KoESKtticttM LTJlftt « c fc fe 

[0 17 6] 

[»woa« 

s^v^ft. iaLAN©i*w-^ ca«y/b- 
^) sic. ^n^no^viz-^T^^fe^nfteg^t 

50 3Wt*« 0 sfc. tHkoMMaflittBnoaBK:«v^ 
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■fe+ay-r-f a^fejea&6ttTi^*a«y;l/— 
7 BSS^l B S S) Ao^tRMtKBAttB 

§ k # tc tt. irt^EfflMB u-^;i/W±o«fe^ i y f- 

[0 4] 0 1 Jc^iHi^x-rAJcfefrtSSitiaatfia 
*kOH"tHE2SSft* I E E E 8 0 2 . 1 1 (C^^tl 

[0 5] 0 Uc^StiSiHii/^-rAtcfettSSiftSDc 

[0 6] 0 1 tc^^n^iifl^XT-Atc^ott^Slffi^^c 

[07] 0 llC^£ftSaff ^Xr-AlC^tt^S^k 

[08] (a) «\ 0 nc^fjifl^X-r Atcfefrt^S 
*Bfttftt*4:©MT«2SSnS IEEE 8 0 2. 1 1 

JB*iSLfc«SCHaCf (b) U\ (a) tc^ti^b 

[0 9] (a) - (c) 0 nc*-ra«^X7 L Ate 
«5tt5S«S»Stf«8*kOH"PlEaSSn5 I E E E 8 0 
2. l n:^nti^7V^x->3 yj^xx h 
y b— V ->x- 3 v y x > X 7 U- A ?}*g 

[01 o] 0 iicttmmi'X'T&ic&ifzmt&mm^ 
[011] 0 nc*sn*a«^xxA*c*jj-*»«a» 

*^4S*tC|qltt6nS I E E E 8 0 2. 1 1 icjg^sn 
[0 1 2] 0 Hc^^n^iiff v^X-r Atc43CtSBift^ 

[0 1 3] 0 1 tc^-TiSfl^x-r A^^tjsa^&tf 

*s* k © n r teas ?n§7v^x-> 3 viss y u— a 

y-r^f l/^l/^x7^$n^.J!lI¥if^t7n- 
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[0 14] (a) - (c) tt, Hllc^fieS/XrA 

0 2. 1 1 icM^nT^SUTVS/X-: ^ 3 y»J *x 
X h y U— i*Rtf »J 7 Vi/x-y 3>'jX#yX7U- 

[01 s] 0 nc^-r aflts/xr- i^casttssit&jBRtf 

4S*ktOMT*(Ei3SSnS 'J 77 v'X-v'h U— 
/0 'Jf^ U^W^*y**hS)!ll¥«*tSt7n 
[0 1 6] CO«MO«Oj|*«8WC«*ffl«^X^i* 
[0 1 7] 0 1 6tc^^n§a<i>'X-rAtC*3l^T, ft!2 

^utta Attstc «« * n-c ^ * MMa mmmtfm *c <a 

o^«affl«Btc»«eB*t-*IBO»ttB**»bfc« 

[01 8] 01 6 icTr^n^mmiy^-TL.ictsi^r, m 

[0 1 9] c:<D»K<0S6*i:fl&oSlflS«!IWc««a«i^ 
XT-A^r«BS^jJc^*r^n 7^0t$5o 
[02 0] 0 1 9tC^-ra^->X-rA*c43tt§4S^T 

[02 i] 01 9 icTf^mmiyxr-Kic^sif^^mv 

a6i>7n-ff-ht$s 0 

[02 2] c<o«WOS6fc:fBOSI«HBJIBte:«*a«^ 
X-r^^rfiEBSW^^-r^n^ ^0T£3 O 
[02 3] 02 2tc^-rffl«S/X-rA*u*5ttS«8*H-e 

/cM7o-ft-ht^l»o 
[02 4] c<oawoS6tefftOHaSfB»J«:iR*affl^ 
XxA«r«tfflS^tC^*r^D 7^T^o 

40 API, A P 2 -Siftfl (*Kffi£%jS£EB) 

WL1 1-WL16, WL31-WL34 -flffl5fc (MM 

1 i ■■•«■« 
i 

2 0, io o— r>-r-*- 

2 K 11 0--tr*i Vr-C-r-y/l 
1 0 1 •■•*«» 
50 1 0 7 •••»«« 
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